wolfCOSE has added new COSE_Key and CBOR APIs that make it safer and easier to build embedded credential, attestation, WebAuthn, and provisioning systems. The

wolfSSL is adding Hybrid Public Key Encryption (HPKE) support to wolfCOSE. HPKE, standardized in RFC 9180, combines a KEM, a KDF, and an AEAD into a modern, misuse-resistant public-key encryption scheme, and bringing it to COSE lets constrained and IoT devices encrypt CBOR-based messages to one or many recipients without hand-rolled key wrapping. The feature […]

NetworkManager is the standard Linux service for configuring and managing wired, wireless, VPN, and mobile network connections. FIPS 140-3 support is

For ten years, wolfMQTT operated purely as a client library. With v2.0.0, we introduced its counterpart: a lightweight MQTT broker built on the same codebase, maintaining our strict footprint requirements and TLS stack. Over the last two releases, we’ve added core features needed to survive process restarts, along with fixes for edge cases that surface […]

wolfSSL is adding RFC 8778 HSS/LMS stateful hash-based signature support to wolfCOSE, giving COSE a NIST-approved, quantum-resistant signing option today. Hash-based signatures are attractive for firmware and long-lived attestation because their security rests only on the hash function, and bringing LMS to COSE lets customers adopt post-quantum signing inside the compact CBOR message formats they […]

The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements sold in the EU. These requirements affect how connected and embedded products are designed, secured, updated, documented, and maintained throughout their lifecycle. As CRA implementation progresses, engineering and product teams need to stay informed about the latest requirements, timelines, and compliance considerations. Join wolfSSL for an EU-friendly webinar covering the Cyber Resilience Act and what recent developments mean for organizations building connected products. In this webinar, we’ll cover: - Key CRA requirements for connected devices - Secure development, updates, and vulnerability handling - Secure boot, firmware integrity, and SBOM support - Preparing engineering teams for CRA expectations - CRA timelines and practical next steps Date: September 29 | 15:00 CET / 6:00 PT (EU-Friendly Time) Duration: 60 minutes Register now to start preparing for CRA requirements. As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.

wolfSSL 5.9.4 is now available with new cryptographic algorithms, expanded post-quantum support, new hardware ports, significant assembly performance work, and a number of vulnerability fixes. Users are always recommended to stay up to date with wolfSSL releases. In this release the use cases affected by high severity reports are: trusted peer certificates (WOLFSSL_TRUST_PEER_CERT, including builds […]

Dynamic memory can make embedded networking unpredictable. Heap fragmentation can cause allocation failures, while non-deterministic allocation times can interfere with real-time deadlines. Memory corruption and undefined behavior make these failures even harder to reproduce and diagnose. Join us on September 30 at 8 AM PT for this dynamic and informative webinar. wolfIP addresses these challenges […]

The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements sold in the EU. These requirements affect how connected and embedded products are designed, secured, updated, documented, and maintained throughout their lifecycle. As CRA implementation progresses, engineering and product teams need to stay informed about the latest requirements, timelines, and compliance […]

Supporting a post-quantum algorithm is not the same as being able to use it in a FIPS 140-3 validated application. The module boundary, hybrid mode, target platform, and build configuration can determine whether an integration remains within the validation. Join wolfSSL for a technical update on th

A signed firmware image does not guarantee a secure boot process. Rollback, interrupted updates, exposed debug access, compromised keys, and fault injection can defeat designs that appear secure on paper. In this 60-minute technical webinar, see how these attacks reach the boot chain, where common

NetworkManager is the standard Linux service for configuring and managing wired, wireless, VPN, and mobile network connections. FIPS 140-3 support is

The LAUNCHXL-F28P55X (TMS320F28P550SJ) features a 150 MHz C28x DSP from TI’s C2000 real-time control family. Designed for motor drives, solar inverters, EV chargers, and digital power supplies, it lacks a hardware TRNG. However, it provides three independent clock sources: two on-chip RC oscillators (INTOSC1 and INTOSC2) and the crystal driving the PLL. Using the chip’s […]

wolfSSL is adding PSA Initial Attestation API 2.0 and RFC 9783 PSA Entity Attestation Token (EAT) support to wolfCOSE. This lets a device prove its identity, security lifecycle state, and boot measurements to a relying party using the compact COSE/CBOR formats already used across the IoT ecosystem. Consistent with wolfCOSE’s design, PSA/EAT is fully off […]

The quantum clock is ticking, and the root of trust is where the countdown matters most. Today we are excited to announce that wolfTPM now supports the SealSQ

The TI C2000 family is TI’s real-time control line: the MCUs inside motor drives, solar inverters, EV chargers and digital power supplies. wolfCrypt now drives the hardware AES accelerator on the LAUNCHXL-F28P55X (TMS320F28P550SJ), a 150 MHz C28x DSP with 133 KB RAM and 1088 KB flash. The F28P550SJ carries an on-chip AESA block, a TI […]

wolfSSL is adding RFC 9338 COSE Countersignature support to wolfCOSE, letting a second party sign over an already-signed, encrypted, or MAC’d COSE message. Countersignatures matter for notarization, timestamping, and multi-party workflows, proving that a message existed and was endorsed by an additional authority after the fact, and making wolfCOSE a fit for supply-chain and attestation […]

systemd is the system and service manager used by most modern Linux distributions to manage system startup, services, logging, and core operating system

Since the wolfMQTT 2.1.0 release back in July, the team has been busy working on some major upgrades. Whether you’re running a client or a broker, there’s a lot to dig into in the current master branch on GitHub. We’ve focused on smoothing out the developer experience, tightening up protocol compliance, and, most importantly, a […]

RFC 9846, published in July 2026, obsoletes RFC 8446 as the specification for TLS 1.3. It is a minor revision in that it is backward compatible, but it tightens a number of requirements that were previously advisory. At wolfSSL, we are working hard on implementing the specification. No KeyUpdate while sending early data. Section 5.5 […]

OpenBao is an open-source secrets management platform used to store, manage, and distribute credentials, encryption keys, and certificates. wolfSSL is evaluating OpenBao with wolfProvider to verify operation with wolfCrypt FIPS. OpenBao can use FIPS 140-3 validated cryptography through wolfProvider with no code changes to OpenBao and potentially no code changes to applications using it, provided […]

We are pleased to announce wolfConnect, a post-quantum Private Network written in C on top of wolfCrypt. wolfConnect transparently establishes end-to-end,

wolfBoot can now read a signed firmware image from a file on a filesystem. This applies to the disk boot path, which covers SD cards, eMMC, SATA and NVMe targets. The feature is read only, optional, and off by default. What it does wolfBoot has supported MBR and GPT partition tables on disk targets for […]

wolfSSL announced three advances for embedded systems: the deterministic wolfIP TCP/IP stack, broader post-quantum support spanning NIST-validated algorithms and native Falcon and FrodoKEM implementations, and wolfHSM support for the Infineon AURIX™ TC4xx. Together, these capabilities support predictable networking, the transition to post-quantum cryptography, and isolated cryptographic services for automotive systems. EDMONDS, Wash., Sept. 21, 2026 […]

Wednesday 23rd September10am EST / 3pm UK / 4pm CET REGISTER NOW As the EU Cyber Resilience Act (CRA) comes into force, aviation manufacturers, oper

wolfSSL (Booth 6027) is joining Toradex at their booth 6222 for Embedded World North America, September 22 to 24. We are demonstrating post-quantum cryptography running on both halves of the Toradex SMARC iMX95 module. pane what it shows left wolfCrypt ML-KEM and ML-DSA benchmarks in a container on the six Cortex-A55 cores, under Torizon OS […]

Products with long deployment lifecycles must continue receiving curl security fixes. Moving through frequent curl releases, however, can introduce unrelated features and behavioral changes, requiring additional integration and regression testing. Join this webinar to learn how Rock-Solid curl supports a stable curl and libcurl release branch for five years. See how security and selected stability fixes are evaluated and delivered while API and ABI compatibility are maintained. The session will also explain the release-management process and support model so you can determine whether a long-term support (LTS) release fits your product. What you will learn: - When an LTS curl release makes sense for a deployed product - What the five-year support commitment covers - How security and stability fixes are selected and delivered - How API and ABI compatibility are maintained - How the release process limits regressions and unrelated changes - What to consider when adopting Rock-Solid curl Date: September 24 | 9:00 AM PT Duration: 60 minutes Register now to learn how Rock-Solid curl can reduce upgrade and validation work for long-lived products. As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.

Products with long deployment lifecycles must continue receiving curl security fixes. Moving through frequent curl releases, however, can introduce unrelated features and behavioral changes, requiring additional integration and regression testing. Join this webinar to learn how Rock-Solid curl supports a stable curl and libcurl release branch for five years. See how security and selected stability […]

Many TCP/IP stacks rely on dynamic memory allocation, background threads, and unpredictable resource usage, making them difficult to analyze, certify, and deploy in constrained embedded systems. Watch now for the first official webinar introducing wolfIP, a compact and deterministic TCP/IP stack de

Choosing a cryptographic library for Rust means balancing more than memory safety. Production deployments require portability, compliance, stable APIs, and a library that can evolve with changing security standards. This technical webinar examines the design of the wolfssl-wolfcrypt crate, includin

We are pleased to announce wolfConnect, a post-quantum Private Network written in C on top of wolfCrypt. wolfConnect transparently establishes end-to-end,

We are excited to announce wolfCOSE 2.0.0, a major update to wolfSSL’s complete, zero-allocation C implementation of CBOR (RFC 8949) and COSE (RFC 9052) built on wolfCrypt. This release adds standardized HSS/LMS stateful hash-based signatures, RFC 9338 countersignatures, RFC 9783 PSA/EAT attestation, RFC 9864 fully specified signature algorithms, delegated signing, and experimental COSE-HPKE, while preserving […]

wolfSSL is one of the smallest commercial TLS / crypto libraries available. Pulling the right configuration levers is the biggest challenge. This post is a short tour of the ten biggest knobs. Two ways to configure the build Every define and flag below can be supplied through either of these paths: Autoconf / configure(./configure): Pass […]