Blog - wolfSSL

wolfCrypt Is Quantum-Safe and has a FIPS 140-3 CAVP cert!

June 3, 2026June 4, 2026

We’re proud to announce that wolfCrypt Post Quantum has officially received CAVP validation from NIST, listed under certificate #A8437. This validation covers the CNSA 2.0 compatible algorithm library contained within the wolfSSL TLS bundle (v7.0.0), and is a critical milestone on the path to a full FIPS 140-3 module validation for our post-quantum module. Certificate […]

July 20, 2026July 20, 2026

wolfSSL can bring FIPS 140-3 validated crypto to your Proxmox and LUKS deployment. Proxmox encrypts disks with LUKS. wolfCrypt can be the validated engine underneath. How it works The wolfCrypt Linux kernel module registers its ciphers with the linux kernel crypto API. Proxmox dm-crypt then hands LUKS operations to wolfCrypt. Your keys and volume layout […]

July 20, 2026July 15, 2026

Aircraft remain in service for decades, but cryptographic standards continue to evolve. Some security decisions are easy to update later. Others aren’t. Learn how embedded DTLS, secure boot, hardware root of trust, and post-quantum cryptography fit together to build avionics platforms that can adapt over a 30-year lifecycle. In this webinar, you’ll learn: Which security […]

July 17, 2026July 16, 2026

Ever had a device in the field reject a firmware update or roll back to an older image, with no clue why? wolfBoot can now tell you. With the new WOLFBOOT_PERSIST_FAILURE_STATUS option, wolfBoot records the cause of every update, self-update and rollback failure into a dedicated flash region, so your application can read it back […]

July 17, 2026July 16, 2026

NXP QorIQ is a family of networking-focused processors built on PowerPC and ARM Layerscape cores, ranging from dual-core parts up to many-core SoCs. Each integrates Ethernet, packet acceleration, and hardware security, and they ship in networking, aerospace, defense, and industrial systems. We have brought wolfIP, our compact TCP/IP stack, to the NXP QorIQ family running […]

July 17, 2026July 16, 2026

wolfBoot can now run as the First Stage Boot Loader (FSBL) on Xilinx ZynqMP, replacing the stock Xilinx FSBL entirely. On a ZCU102 (xczu9eg) the BootROM hands control straight to wolfBoot in on-chip memory (OCM) at EL3; wolfBoot brings up the processing system, verifies a signed image with its own keys, and boots Linux to […]

July 16, 2026July 16, 2026

wolfSSL’s PKCS#7/CMS implementation has long produced and verified SignedData with the signature algorithms you’d expect — RSA and ECDSA. It now speaks post-quantum as well: PKCS#7 SignedData can be signed and verified using ML-DSA, the Module-Lattice-Based Digital Signature Algorithm standardized by NIST in FIPS 204 (formerly CRYSTALS-Dilithium). The encoding follows the conventions the IETF LAMPS […]

July 16, 2026July 16, 2026

The problem When an SSH client connects to a server, it needs to know it is talking to the real server and not an attacker in the middle. Classic SSH handles this with a raw host key that the client remembers on first connection. That works for a single machine, but it does not scale […]

July 16, 2026July 14, 2026

The NXP CAAM (Cryptographic Accelerator and Assurance Module) supports offloading cryptographic operations for acceleration along with heightened security. wolfSSL supports accessing the hardware acceleration in many different operating environments, such as with QNX or NXP’s Yocto Linux builds. For QNX builds wolfSSL has targeted specific i.MX devices, check with our manual or support channel to […]

July 15, 2026July 13, 2026

wolfSSL’s asynchronous crypto offloads public-key, cipher, and hashing work to Intel QuickAssist (QAT) hardware. This update (PR #10772) makes that offload use every QAT device in a multi-adapter system, and hardens it for multi-process and CI use. The problem: idle devices Each worker thread binds to one QAT crypto instance, and the driver hands back […]

July 15, 2026July 13, 2026

The RealTek RTL8735B (AmebaPro2) is an Arm Cortex-M33 AIoT SoC with a hardware crypto engine and, importantly, a per-device Hardware Unique Key (HUK) fused into the silicon. The HUK never leaves the chip and cannot be read by software. That makes it an ideal root from which to derive keys that are bound to one […]

1 2 3 4 … 246 247 248

RECENT BLOG NEWS

wolfCrypt Is Quantum-Safe and has a FIPS 140-3 CAVP cert!

wolfSSL FIPS for Proxmox: LUKS Disk Encryption

Quantum-Ready Avionics: Embedded DTLS and Secure Boot for the Next 30 Years

wolfBoot Adds Persistent Failure Diagnostics

wolfIP Comes to NXP QorIQ Bare-Metal

wolfBoot as the Xilinx ZynqMP FSBL: a full-featured secure first-stage replacement

Post-Quantum Signatures for Signed Messages: ML-DSA in PKCS#7

wolfSSH now supports X.509 host certificates with TPM-backed keys: Certificate-based host authentication with private keys sealed in hardware

How To Build wolfSSL + CAAM on i.MX7 with Yocto Linux?

wolfSSL Intel QuickAssist (QAT) Performance Improvements

wolfSSL TLS with Hardware-Bound Keys on the RealTek RTL8735B (AmebaPro2)

Weekly updates

Archives

RECENT BLOG NEWS

Posts navigation

Weekly updates

Archives