We have added support for creating and verifying signatures with ML-DSA. This new feature was introduced in wolfCLU release 0.1.6 and can be seen in the handy help message by running `wolfssl -h`. There are a couple of options available to be passed to the new `dilithium` command to increase the flexibility for tuning performance versus security strength.
For more information or questions about the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Quantum computers are not a far-off dream anymore—they are increasingly becoming a reality, and that brings challenges for the future of secure communications. Traditional public-key cryptosystems like RSA and ECC are vulnerable to quantum attacks, making the transition to post-quantum cryptography (PQC) a vital consideration for businesses planning long-term security solutions, especially those in the Automotive and industrial sectors. With emerging standards from NIST, post-quantum algorithms are paving the way for a new era of cryptographic resilience. However, until now, no commercially available HSM solutions offered support for these post-quantum algorithms, leaving industries like automotive, aerospace, and industrial that rely on HSM security struggling to adopt these critical technologies. Until now.
Enter wolfHSM, our innovative Hardware Security Module (HSM) firmware framework, designed to bring state-of-the-art cryptography to HSM platforms. wolfHSM delivers a unified API for secure cryptographic operations, object storage, and key management on hardware platforms with HSM coprocessors. This allows applications to harness a device’s hardware root of trust while providing a streamlined abstraction for offloading cryptographic operations to the HSM via the wolfCrypt API.
Built on the flexibility of wolfCrypt, wolfHSM enables easy integration of a wide range of cryptographic standards, from trusted legacy algorithms to cutting-edge standards like the latest in post-quantum. This adaptability is what sets wolfHSM apart from the legacy Automotive HSM’s. With traditional HSM solutions, you’re stuck with a fixed set of algorithms, with no option to adapt to evolving security requirements. wolfHSM changes the game—it empowers you to deploy any algorithm supported by wolfCrypt as needed, including post-quantum algorithms. You can easily pivot from RSA or ECC to quantum-resistant alternatives like ML-KEM (Kyber), ML-DSA (Dilithium), Falcon, or LMS/XMSS. This will give you flexibility to meet evolving government regulations like CNSA 2.0, UN R155, and others.
As the cryptographic landscape shifts toward quantum resistance, the inherent flexibility afforded by wolfHSM is an easy way to reduce risk when developing your application. With wolfHSM, your application can evolve with these changes—supporting new standards as they emerge and swapping algorithms without the need for expensive hardware changes. With wolfHSM, adding post-quantum cryptography to your HSM-based applications is as straightforward as using standard algorithms like RSA or AES, giving you future-proof security today.
Whether you need to prepare your infrastructure for quantum-safe cryptography or simply want to keep your cryptographic options open, wolfHSM has you covered. wolfHSM’s intrinsic crypto-agility ensures that new requirements can be met quickly and securely without the need for a complete overhaul of your existing infrastructure. This means peace of mind, knowing that your security is always one step ahead of the next threat.
wolfHSM supports a variety of automotive HSM platforms, including the Infineon AURIX TC3xx, ST SPC58N, and Renesas RH850, but can be ported to run on any device—bringing crypto agility and quantum resilience to your platform of choice.
Interested in taking your HSM application into the quantum age? Want to use post-quantum algorithms like LMS, ML-KEM, ML-DSA, or XMSS on an AURIX TC3xx HSM? Let us know! Reach out to us at facts@wolfSSL.com, and let’s discuss how we can help future-proof your security.
If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Get ready to kick off the holiday season with wolfSSL’s Week of Webinars! From December 2nd to December 6th, join our cybersecurity experts as we dive into critical topics such as FIPS 140-3 compliance, DTLS 1.3, incorporating wolfSSH into your Yocto builds, and the launch of Rock-Solid curl. We’re bringing you in-depth knowledge to boost your security expertise. These webinars offer a chance to connect, learn, and get your questions answered in real-time.
Mark your calendars and secure your spot for one or all of our sessions!
Week of Webinar Schedule:
Discover how to simplify security compliance with FIPS 140-3 and CNSA 2.0 in our live webinar on December 2nd at 10 AM PT. This session will explore wolfCrypt FIPS 140-3 Cert #4718, and CNSA 2.0’s future impact. Learn how wolfSSL simplifies compliance with features like Known Answer Tests, Startup Integrity Checks, and post-quantum algorithms. Follow along with a live demo to achieve seamless compliance.
Discover the essentials of FIPS 140-3 compliance in our webinar tailored for the Asia Pacific time zone on December 3rd at 4 PM PT / December 4th at 9 AM JST. Discover how FIPS 140-3 strengthens cryptographic security, explore wolfCrypt certifications, and get updates on wolfSSL’s FIPS roadmap, including post-quantum advancements.
Join wolfSSL on December 4th at 10 AM PT for an in-depth exploration of DTLS 1.3 and its vital role in modern security communication. This highly-anticipated session will uncover the key enhancements of DTLS 1.3 over DTLS 1.2, practical use cases in UDP-based applications, and wolfSSL’s cutting-edge examples and best practices for implementing DTLS 1.3.
Join us on December 5th at 10 AM PT for an exclusive webinar unveiling Rock-Solid curl, the long-term support version tailored for maximum security, stability, and reliability. Learn how this release ensures smooth implementations, enhanced security measures, and a five-year support commitment—perfect for businesses prioritizing application security.
Join us on December 6th at 10 AM PT to learn how to build and integrate wolfSSH into your Yocto Project environments, enhancing secure file transfer and communication capabilities. This webinar will explore practical techniques for seamless integration, advanced configurations, and real-world deployment scenarios.
These webinars are designed to give you actionable insights into today’s most pressing cybersecurity topics, with live Q&A in each session. Don’t miss this opportunity to learn from industry experts and advance your knowledge in cybersecurity!
As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
In recent years, China’s cryptographic standards have gained significant traction on the global stage, with algorithms like SM2, SM3, and SM4 setting the standard for secure communications within Chinese regulatory frameworks. Companies operating in or doing business with China must support these ciphers to meet compliance requirements and to ensure secure interoperability. However, until now, no commercially available HSM solutions offered support for the full suite of SM ciphers, meaning industries that rely on HSM offload for security—such as automotive, industrial, or aerospace—face significant integration challenges.
Enter wolfHSM, our generic Hardware Security Module (HSM) firmware framework, targeting automotive HSM platforms and beyond. wolfHSM provides a unified API for secure cryptography, object storage, and key management on devices with HSM coprocessors. wolfHSM enables applications to easily leverage a platform’s hardware-based root of trust and provides a streamlined abstraction for offloading all cryptography to the HSM coprocessor through the wolfCrypt API.
Built to support any algorithm provided by wolfCrypt, wolfHSM enables users to integrate a wide variety of cryptography, from established algorithms to the latest bleeding edge draft standards. This flexibility is a key differentiating factor of wolfHSM, setting it apart in a market where adaptability and cryptographic choice are becoming increasingly crucial. With existing HSM solutions, you are locked into a small set of supported algorithms with no opportunity to modify or update HSM capabilities. With wolfHSM, you can deploy any algorithm supported by wolfCrypt, and are able to seamlessly switch between algorithms as needed, ensuring that you’re always using the best tools for your security needs. Given this flexibility, new algorithms like the SM ciphers can be deployed on your HSM just as easily as standard algorithms like AES or SHA256.
Whether you’re specifically looking to integrate SM ciphers into your HSM-based application, or just need a solution that allows you keep your options open, wolfHSM has what you need. wolfHSM’s “out of the box” crypto-agility means that as new requirements arise, wolfHSM can quickly and easily adapt – securely and without overhauling your existing infrastructure.
wolfHSM supports standard automotive HSM platforms like the Infineon AURIX TC3xx, ST SPC58N, Renesas RH850, etc. but can be easily ported to run on any device.
Are SM ciphers on an HSM something you are interested in? Do you want to use SM ciphers on AURIX TC3xx HSM? Let us know! Reach out to us at facts@wolfSSL.com and we can discuss.
If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Parsing and viewing PKCS7 bundles just got easier with the addition of the `pkcs7` command in wolfCLU. This neat command takes multiple arguments allowing for printing out the certificates contained in a PKCS7 bundle and parsing both PEM and DER formats. Creation of PKCS7 bundles is supported using wolfSSL API’s but not yet supported in wolfCLU. Let us know at facts@wolfssl.com if this is a capability desired in wolfCLU.
If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Are you looking to add FIPS 140-3 certified cryptography to your Realm database? wolfSSL has you covered!
We’ve successfully integrated wolfSSL into Realm, providing you with robust TLS and cryptographic functionality. A version tested on Linux is available, and we can also help you enable support for platforms like Android and iOS upon request.
Getting Started with Realm and wolfSSL
To start using wolfSSL with Realm, follow these steps:
Configure wolfSSL:
./configure --enable-static --enable-opensslall --enable-enckeys --enable-certgen --enable-context-extra-user-data sudo make install
Optionally, specify the installation directory with --prefix=/path/to/install.
Download and patch Realm Core:
git clone https://github.com/realm/realm-core.git cd realm-core git checkout a5e87a39 git submodule update --init --recursive
Applying the Patch to support wolfSSL:
git apply ../realm-v13.26.0.patch
You can obtain the patch from wolfSSL/osp/realm directory
Build Realm Core with wolfSSL:
mkdir build cmake -B build -DREALM_ENABLE_ENCRYPTION=1 -DREALM_USE_WOLFSSL=1 -DREALM_WOLFSSL_ROOT_DIR=/usr/local/lib cmake --build build ./build/test/realm-tests
If you’d like to secure your Realm app with wolfSSL or need support for other platforms, reach out to us at facts@wolfSSL.com or call us at +1 425 245 8247.
Stay secure with wolfSSL and Realm!
Download wolfSSL Now
For anyone using DTLS 1.2, now might be a good time to start moving to DTLS 1.3. Why is now a good time?
Are you selling software that uses DTLS 1.2 to the American government agencies? If so, now is the time to move to DTLS 1.3.
If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Learn how wolfBoot 2.3.0 revolutionizes secure boot for embedded systems with groundbreaking features designed for quantum resistance and hybrid authentication. Join us for our upcoming webinar, What’s new in wolfBoot, on November 21st at 10 AM PT, presented by wolfSSL Software Engineer Daniele Lacamera. Gain insights into the integration of ML-DSA signature algorithms, the impact of post-quantum cryptography, and performance optimizations that elevate boot security and efficiency.
Register Today: What’s new in wolfBoot
Date: November 21st | 10 AM PT
Explore advancements that are redefining secure boot, including hybrid authentication that combines post-quantum and classic cryptographic techniques to protect against quantum threats. Discover how these innovations ensure future-proof security and compliance with the highest standards, such as CNSA 2.0.
This webinar will cover:
Secure your spot now to stay ahead in embedded system security and learn from industry experts. Register Now!
As always, our webinars include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
wolfCLU release 0.1.6 is available! wolfSSL’s command line utility (wolfCLU) is a drop in replacement for the OpenSSL command line utility. It’s a handy swiss army knife of common operations used, often great for system admins or test developers. Doing things such as creating and signing certificates, generating new keys, parsing X509 certificates into human readable form, and much more. This release has seen some fixes to wolfCLU along with exciting new features. One of the new features being the addition of support for post quantum Dilithium signature generation and verification. For a full list of changes check out the ChangeLog.md.
If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.
Download wolfSSL Now
Join us for an exclusive webinar on the cutting-edge integration of post-quantum algorithms in curl! As quantum computing advances, the need for quantum-safe cryptography is becoming critical. wolfSSL Senior Software Developer Anthony Hu will introduce essential concepts and demonstrate how to future-proof your applications against quantum threats using curl.
Register Now: Post-Quantum Algorithms in curl
Date: November 20th | 10 AM PT
Gain insights into post-quantum algorithms in curl with a hands-on demo and an in-depth exploration of key topics, including ML-KEM (FIPS 203) and ML-DSA (FIPS 204). From understanding the motivation behind CNSA 2.0 to building quantum-safe connections, this session covers the technical and practical aspects of achieving quantum resistance.
This webinar will cover:
Register today for exclusive access to this in-depth webinar on post-quantum algorithms in curl! Enhance your understanding and stay ahead in the evolving landscape of quantum-safe cybersecurity.
As always, our webinars include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or +1 425 245 8247.
Download wolfSSL Now
