wolfSSL is bringing hardware key isolation to the Altera Agilex 5 SoC FPGA

wolfSSL is adding native support for the Secure Device Manager (SDM) hardened crypto services on Altera Agilex 5 devices. The new port connects wolfCrypt directly to the FPGA Crypto Services (FCS) stack, so keys can live where Linux cannot reach them: inside the SDM itself. Applications get that isolation through the same wolfSSL APIs they already use, enabled with a single configure switch, and the whole stack is available in a Yocto image through meta-wolfSSL.

What is coming

  • Hardware TRNG, SHA-256, and AES-128/256 CBC and CTR offload
  • ECDSA and ECDH P-256/P-384 with device resident keys, plus HMAC-SHA256/384/512 verification with vault keys (P-384 signing faster on the SDM than in software)
  • Yocto support through meta-wolfSSL: one libfcs recipe plus one PACKAGECONFIG line

If you have questions about any of the above, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.

Download wolfSSL Now