In September of 2026, the Cryptographic Module Validation Program (CMVP) will move all remaining FIPS 140-2 certificates to the Historical List, including the modules powering Windows BitLocker. For organizations navigating FIPS, CMMC, and FedRAMP, this is an immediate critical stop, as NIST guidance states federal agencies “should not include” Historical-status modules in new procurements, and […]
Read MoreMore TagMonth: June 2026
FIPS with Statically-Linked wolfSSL
Many FIPS deployments of wolfSSL’s FIPS 140-3 validated wolfCrypt module use dynamic linking to load the shared object / DLL. However, sometimes it is necessary for some types of projects to statically link the libwolfssl.a static archive directly into an executable or firmware image. This post explains why static linking takes a little extra care, […]
Read MoreMore TagCUPS FIPS 140-3 Tested & Available with wolfCrypt FIPS
CUPS (Common UNIX Printing System) is a printing system that manages print services and network printing on Linux, macOS, and UNIX-based operating systems. FIPS 140-3 support is available for CUPS with wolfCrypt FIPS, tested for use with CUPS environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure print […]
Read MoreMore TagSSH Host Keys That Never Leave the TPM with wolfSSH and wolfTPM
Many embedded devices generate their SSH server host key in RAM on every boot, then hand it to the SSH stack as a DER buffer. It works, but the private key lives in memory where firmware bugs, cold-boot attacks, or a careless core dump can leak it. For a safety-critical or long-lived product, the host […]
Read MoreMore TagIntroducing wolfHAL: A Lightweight Hardware Abstraction Layer for Embedded Systems
We are excited to announce wolfHAL, a new open-source project from wolfSSL. wolfHAL is a lightweight, OS-agnostic, compiler-agnostic hardware abstraction layer (HAL) for embedded targets, written in portable C. It sits between your application and the silicon, exposing a clean, uniform API for talking to peripherals such as GPIO, UART, SPI, I2C, DMA, flash, timers, […]
Read MoreMore TagwolfBoot Microchip PolarFire SoC support for full HSS replacement
wolfBoot can now boot a Microchip PolarFire SoC (MPFS250T) entirely on its own — no Hart Software Services (HSS) required — and bring up 4-CPU SMP Linux from a signed, verified image. One bootloader, one root of trust wolfBoot can now run in M-Mode directly on the E51 hart out of eNVM and handles all […]
Read MoreMore TagwolfCrypt as a FIPS 140-3 Crypto Provider for VPP
wolfSSL has lab-demoed wolfCrypt as a crypto provider for VPP. VPP (Vector Packet Processing) is FD.io’s user-space networking data plane. wolfCrypt plugs into VPP’s crypto dispatch and handles IPsec traffic. VPP has no FIPS 140-3 validated crypto path today. The built-in crypto has no validation. The OpenSSL path carries whatever FIPS posture OpenSSL has; on […]
Read MoreMore TagwolfSSL Roadmap 2026
Understand upcoming changes before they impact your builds, compliance timelines, and security architecture. Join us on June 25 at 9 AM PT for a focused walkthrough of the wolfSSL roadmap. This session goes beyond a high-level preview to highlight what’s actually changing across FIPS 140-3, post-quantum cryptography, and TLS—and what those changes mean for your […]
Read MoreMore TagwolfTPM Firmware TPM 2.0 with Post-Quantum
Firmware TPMs (fTPMs) are enabling TPM 2.0 functionality on platforms that cannot accommodate discrete TPM devices, including microcontrollers, safety processors, FPGA soft-cores, and trusted execution environments. Join us on June 24 at 9 AM PT for a technical webinar on wolfTPM Firmware TPM (fTPM). We’ll examine how TPM 2.0 is being deployed across embedded systems, […]
Read MoreMore TagFree Support for Open Source Projects
At wolfSSL, we are committed to supporting the open source community. If you are using wolfSSL software in an open source project and need technical assistance, contact us at support@wolfssl.com. Our engineering team is happy to help with integration, configuration, and troubleshooting questions. If you think your project may require a GPLv3 license exception, please […]
Read MoreMore Tag