wolfIP now ships an in-tree Wi-Fi supplicant (src/supplicant/) that brings WPA2-Personal, WPA2-Enterprise, and WPA3-Personal authentication to resource-constrained embedded devices, with no external proprietary supplicant and no dynamic memory allocation. It is a clean-room implementation built directly on wolfSSL/wolfCrypt, so the same crypto you already trust now drives your Wi-Fi association. Supported authentication methods Mode Standard […]
Read MoreMore TagMonth: July 2026
Introducing tinytls13: A minimal TLS 1.3 build profile that fits a complete client in about 30 KB of flash.
In brief. tinytls13 is a new wolfSSL build profile for deeply constrained devices. It compiles a complete, working TLS 1.3 client in about 30.8 KB of flash on an ARM Cortex-M33, with no X.509 and no extras you did not ask for. Why we built it Secure boot, attestation, and IoT connectivity increasingly need TLS […]
Read MoreMore TagXilinx Versal Gen 2 ASU support coming to wolfSSL
wolfSSL is proud to announce that active development has started to support offloading cryptographic operations to the ASU subsystem found on the Xilinx Versal Gen 2. We are currently implementing offload support for TRNG, SHA2, SHA3, SHAKE, HMAC, AES, RSA, and ECC. This will help enable future wolfSSL projects on the Versal Gen 2 platform, […]
Read MoreMore TagwolfMKA: The MACsec Control Plane for Your Switch Firmware
Your switches already do the hard part in silicon. A modern MACsec-capable ASIC encrypts, authenticates, and replay-protects every frame at line rate on the physical layer – no CPU in the data path. But that hardware doesn’t key itself. Before a single protected frame goes out, something has to discover peers, prove liveness, elect a […]
Read MoreMore TagwolfMQTT 2.1.0 Released: Broker Session Persistence, Stronger Security, and MQTT v5 Reliability
wolfMQTT is wolfSSL’s lightweight MQTT client and broker library, purpose-built for embedded and IoT devices. It is small, portable, and pairs directly with the wolfSSL embedded TLS library for secure MQTT over TLS 1.3, giving resource-constrained devices a fully authenticated, encrypted messaging stack in a tiny footprint. The wolfMQTT 2.1.0 release extends the built-in broker […]
Read MoreMore TagDesigning Secure Automotive Platforms
Securing modern vehicles requires more than protecting network traffic. Security must extend from secure boot and software updates to in-vehicle communications, cloud connectivity, and ADAS throughout the vehicle lifecycle. This webinar shows how the technologies used to secure modern automotive platforms fit together in practice. You’ll gain a practical understanding of how automotive HSMs, secure […]
Read MoreMore TagWhite House EO 14412
By now, anyone who tracks security protocols has heard ad nauseum about the White House Executive Order 14412 regarding post-quantum cryptography (PQC). In case you’ve been hiding under a rock, it can be found here. The TL;DR is that all High Value Assets (HVAs) must use PQC key establishment by 2030 and PQC digital signatures […]
Read MoreMore TagProtecting Control-Center Communications: wolfMKA and MACsec for NERC CIP-012-2
If you operate part of the North American Bulk Electric System, NERC CIP-012-2 – Cyber Security: Communications between Control Centers – requires you to protect the confidentiality and integrity of Real-time Assessment and Real-time monitoring data while it is transmitted between Control Centers, and to identify where that protection is applied. Both properties have to […]
Read MoreMore TagwolfProvider Post-Quantum Cryptography: ML-KEM and ML-DSA
wolfProvider now brings post-quantum key encapsulation and signatures to any OpenSSL 3.x application through the wolfCrypt backend, with no application code changes. The difference from OpenSSL’s own post-quantum support is validation. The ML-KEM (FIPS 203) and ML-DSA (FIPS 204) implementations that actually run are wolfCrypt’s, which hold NIST CAVP validation under certificate #5041. An application […]
Read MoreMore TagPreliminary MACsec Key Agreement (MKA) Support, Built for AUTOSAR
Secure in-vehicle and industrial Ethernet is moving from “nice to have” to “required,” and MACsec (IEEE 802.1AE) is at the center of it — providing line-rate Layer 2 encryption, integrity, and replay protection directly on the wire. But MACsec doesn’t key itself. It needs a control plane to discover peers, prove liveness, elect a Key […]
Read MoreMore Tag