Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. This technical webinar shows how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You’ll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk […]
Read MoreMore TagMonth: July 2026
wolfSSL Now Available for Zephyr’s Secure Sockets Layer
We’re pleased to announce that wolfSSL can now be integrated directly into the secure sockets layer of the Zephyr RTOS. The required patches are available now in our Open Source Project (OSP) repository. What This Means These patches let you swap out mbedTLS and use wolfSSL as the TLS provider behind Zephyr’s native socket API. […]
Read MoreMore TagA Quantum Safety Net for TLS 1.3: Mandatory PSKs with Certificate Authentication
TLS 1.3 normally forces a choice: authenticate with certificates or with a pre-shared key, but not both in the same handshake. Combining them gives you a second, independent root of trust that survives even if the first one falls — and wolfSSL now supports both doing this and requiring it. The foundation is RFC 8773, […]
Read MoreMore TagPost-Quantum Cryptography in PKCS#11: ML-KEM and ML-DSA in wolfSSL and wolfPKCS11
The migration to post-quantum cryptography is now a practical requirement, with NIST’s standardization of ML-KEM (FIPS 203) and ML-DSA (FIPS 204) and timelines such as NSA’s CNSA 2.0 driving adoption. PKCS#11 is a natural place to make that move, and wolfSSL now supports it. wolfPKCS11 supports both ML-KEM, the FIPS 203 key encapsulation mechanism (formerly […]
Read MoreMore TagStateful Hash-Based Signatures (LMS and XMSS) in X.509 Certificates
wolfSSL now supports the stateful hash-based signature schemes LMS/HSS and XMSS/XMSS^MT in X.509 certificates, following RFC 9802. What’s New Both sides of the certificate lifecycle are covered: Generation – Sign certificates and CSRs with an LMS/HSS or XMSS/XMSS^MT key, encoded exactly as RFC 9802 specifies. Verification – Parse and verify certificate chains that use these […]
Read MoreMore TagwolfCrypt on the TI C2000 C28x: PQC ML-DSA/ML-KEM on a 16-bit-byte DSP
We’re excited to share that wolfCrypt now runs a full modern crypto suite on Texas Instruments’ C2000 C28x – the NIST post-quantum schemes ML-DSA (FIPS 204) and ML-KEM (FIPS 203), plus RSA, Diffie-Hellman, AES, ChaCha20-Poly1305, HMAC/HKDF, the Curve25519/Ed25519, Curve448/Ed448, and NIST P-256 elliptic-curve schemes, and the SHA-1/2/3 and SHAKE hash families – all validated on […]
Read MoreMore TagwolfSSL adds LMS and XMSS to wolfHSM
LMS and XMSS are stateful hash-based signature schemes (NIST SP 800-208) suited to long-lived firmware and code signing. wolfSSL has added support for both post-quantum cryptographic (PQC) algorithms to wolfHSM. This feature leverages the hardware security module (HSM) to securely and persistently store the “stateful” key and counter for both algorithms, as well as perform […]
Read MoreMore TagMbedOS End of Life; but wolfSSL on MbedOS lives on
MbedOS goes into End-of-Life in July this year, but as we are committed to our customers and their security, we will still support wolfSSL product on MbedOS going forward. If you’re in a pinch with CRA or other security requirements, feel free to contact us at facts@wolfssl.com, and we’ll work out a plan with you […]
Read MoreMore TagwolfIP comes to AMD/Xilinx: bare-metal TCP/IP on ZynqMP, Versal and Zynq-7000
We have added bare-metal wolfIP ports for three AMD/Xilinx PS-GEM SoCs, all brought up and measured on real hardware: ZCU102 – Zynq UltraScale+ MPSoC, Cortex-A53 (AArch64, EL3) VMK180 – Versal ACAP Gen 1, Cortex-A72 (AArch64, EL3) ZC702 – Zynq-7000, Cortex-A9 (ARMv7-A, SVC) All three share a single source tree (each board’s Makefile build-selects its components, […]
Read MoreMore TagwolfSSL granted NIST ESV Cert #335
Following a Dec 5, 2025 submission, the wolfSSL proprietary, software-based TRNG ‘wolfEntropy’ has officially achieved NIST Entropy Source Validation: ESV Certificate #335. The Engineering The wolfEntropy solution was written from the ground up to eliminate supply-chain risk and optimize performance, footprint, and run time resource use: Custom Architecture: Zero-dependency, proprietary jitter-based design. Cache-Optimized: Specifically engineered […]
Read MoreMore Tag