Since version 2.0.0, wolfBoot runs as a bare-metal bootloader on x86-64 (amd64 / Intel 64), using Intel FSP for silicon initialization — the same approach taken by Intel’s Slim Bootloader. So what sets them apart? Quite a lot. Getting started with wolfSSL? Download the latest libraries here and start exploring. Advanced Cryptography & Quantum Readiness […]
Read MoreMore TagCategory: wolfBoot
wolfBoot adds DICE and Measured boot via PSA Initial Attestation
Secure boot establishes authenticity (“this image is signed by a trusted key”). But many modern deployments also need attestation: a portable, verifiable way to prove what actually booted to a relying party: during onboarding, after updates, and throughout a device’s lifetime. That’s where DICE (Device Identifier Composition Engine) comes in. DICE composes a device identity […]
Read MoreMore TagwolfBoot Cipher and Hash Algorithm Benchmarks on STM32H5
About wolfBoot wolfBoot is a portable, OS-agnostic secure bootloader designed for embedded systems. It provides secure boot capabilities with support for a wide range of cryptographic signature algorithms, from traditional RSA and ECDSA to post-quantum algorithms like ML-DSA, LMS, and XMSS. wolfBoot is built on top of the wolfCrypt cryptography library and is designed to […]
Read MoreMore TagSecure Boot on AMD Versal with wolfBoot
The AMD Versal™ Gen 1 VMK180 evaluation kit integrates Arm® Cortex®-A72 processors with programmable logic and AI engines in a single device. This article announces wolfBoot support on the VMK180, showing how a vendor-neutral secure bootloader can provide cryptographically verified boot and secure, updatable firmware for Versal-based systems. wolfBoot Features wolfBoot is a vendor-neutral, portable […]
Read MoreMore TagReplacing TF-M on ARMv8-M: wolfBoot Secure Domain & wolfPSA, now integrated with Zephyr for CRA compliance
ARMv8-M TrustZone (TrustZone-M) gives Cortex-M23, Cortex-M33, Cortex-M35P and related MCUs a clean, hardware-enforced way to split a system into two execution environments: Secure world: the hardware root of trust, key material, security services, and the code that configures isolation. Non-secure world: the main RTOS and application logic, kept away from secrets by hardware boundaries. In […]
Read MoreMore TagwolfBoot TrustZone-M Support on the Nordic nRF5340
We’re excited to announce that wolfBoot now delivers full TrustZone-M support for the Nordic nRF5340, one of the most popular dual-core SoCs in the connected IoT space. Beyond Basic Secure Boot The nRF5340’s application core features an Arm Cortex-M33 with TrustZone-M capabilities, and wolfBoot now takes full advantage of this architecture. By configuring the System […]
Read MoreMore TagwolfBoot on NXP MCXW716: Secure Boot with TrustZone-M
We are pleased to announce a key upgrade to our support for the NXP MCXW716. wolfBoot has supported the MCXW716 for some time, running both the bootloader and the application together in the Secure World. We have now extended this support to leverage the Arm Cortex-M33 TrustZone architecture fully. This adds the MCXW716 to the […]
Read MoreMore TagSecuring the Edge AI with wolfSSL on the STM32N6
The rise of Edge AI demands robust security solutions, and the STM32N6, with its integrated Neural Processing Unit, stands out as a powerful platform for these applications. When paired with wolfSSL’s comprehensive security offerings, the STM32N6 becomes an even more formidable solution for secure Edge AI deployments. The STM32N6 is the first STM32 MCU to […]
Read MoreMore TagAnnouncing wolfBoot Support for Microchip PolarFire SoC
We are excited to announce wolfBoot support for the Microchip PolarFire SoC (MPFS250). This integration provides a secure, lightweight U-Boot replacement for the PolarFire SoC platform, offering significant advantages including much smaller code size, memory safety (no malloc/free), encrypted / patching firmware updates, power fail-safe updates, post-quantum cryptography support (ML-DSA, LMS and XMSS with hybrid […]
Read MoreMore TagwolfBoot v2.7.0: Unified TrustZone-M support, New Hardware Platforms, easier integration with CMake
The wolfSSL team is pleased to announce the release of wolfBoot 2.7.0, the latest version of our portable secure bootloader for embedded systems. This release focuses on three main areas: Expanding hardware coverage to radiation-hardened platforms Unifying and hardening TrustZone-M and dual-bank update flows Making update state tracking and integration easier with filesystem and MTD-backed […]
Read MoreMore Tag