RECENT BLOG NEWS

wolfSSL’s random number generator, called the DRBG, produces the random values behind every key and secure connection. Until now, if several parts of a program (threads) shared one generator at the same time, they could interfere with each other and were not documented as ‘thread safe’. Copying a running program, which Linux calls a “fork”, […]

wolfCrypt now supports the SRAM-based hardware PUF (Physically Unclonable Function) on the NXP LPC55S69. A device can now derive its root secrets from its own silicon, so no key ever has to be injected, stored in the clear or exposed on a production line. To show the feature in action, wolfBoot uses the PUF as […]

In October 2026 the Mbed TLS team announced that its current maintainers will stop working on the TLS and X.509 libraries in April 2027, one month after the 3.6 LTS branch reaches end of life. We covered what that means for shipping products in Mbed TLS After April 2027: What It Means for Your Product. […]

Version 3.0.0 of wolfssl-wolfcrypt is now available on crates.io. This is the Rust wrapper crate for the wolfCrypt cryptography library. This release focuses on safety improvements and increased compatibility with various build configurations and FIPS configurations. This release includes a major version bump because several APIs changed so that mistakes show up earlier and failures […]

wolfSSL ships many products. They build with autotools, CMake, plain Make, IAR Embedded Workbench, Zephyr, and IDE projects. Each product needs an SBOM, but each product should not keep its own copy of the SBOM logic. wolfssl-compliance-tooling is the shared toolkit. A product describes its own build. The toolkit turns that description into CycloneDX 1.6 […]

If you use an NXP EdgeLock SE050 or SE051 secure element with wolfSSL, you’ll want to upgrade to 5.9.4. The SE05x port got a lot of work this release. Some of it adds APIs people have been asking for. Some of it was needed because newer silicon changed the rules. ECDH on applet 7.2 The […]

wolfSSL was OpenWrt’s default TLS library from the 21.02 release until 23.05, when OpenWrt switched to Mbed TLS. One of the reasons given was that Mbed TLS is “considerably smaller”. In part one, I compared wolfSSL, Mbed TLS and OpenSSL on a 650 MHz MIPS router. There, the wolfSSL image came out within 13 KB […]