wolfSSL now supports offloading AES-ECB and AES-CMAC operations on S32K3 family devices equipped with the ACE accelerator. This accelerator is featured specifically on the S32K388 and S32K389. The ACE accelerator provides a significant speedup compared to our software implementation and the native HSE operations available on the S32K3. This means you can keep your keys […]
Read MoreMore TagMonth: September 2026
wolfCOSE Adds COSE HPKE Encryption
wolfSSL is adding Hybrid Public Key Encryption (HPKE) support to wolfCOSE. HPKE, standardized in RFC 9180, combines a KEM, a KDF, and an AEAD into a modern, misuse-resistant public-key encryption scheme, and bringing it to COSE lets constrained and IoT devices encrypt CBOR-based messages to one or many recipients without hand-rolled key wrapping. The feature […]
Read MoreMore TagThe wolfMQTT Broker: Persistence, Encryption at Rest, and a Round of Hardening
For ten years, wolfMQTT operated purely as a client library. With v2.0.0, we introduced its counterpart: a lightweight MQTT broker built on the same codebase, maintaining our strict footprint requirements and TLS stack. Over the last two releases, we’ve added core features needed to survive process restarts, along with fixes for edge cases that surface […]
Read MoreMore TagwolfCOSE Adds Post-Quantum LMS Signatures
wolfSSL is adding RFC 8778 HSS/LMS stateful hash-based signature support to wolfCOSE, giving COSE a NIST-approved, quantum-resistant signing option today. Hash-based signatures are attractive for firmware and long-lived attestation because their security rests only on the hash function, and bringing LMS to COSE lets customers adopt post-quantum signing inside the compact CBOR message formats they […]
Read MoreMore TagwolfSSL 5.9.4 Release Blog
wolfSSL 5.9.4 is now available with new cryptographic algorithms, expanded post-quantum support, new hardware ports, significant assembly performance work, and a number of vulnerability fixes. Users are always recommended to stay up to date with wolfSSL releases. In this release the use cases affected by high severity reports are: trusted peer certificates (WOLFSSL_TRUST_PEER_CERT, including builds […]
Read MoreMore TagLive Webinar – Porting wolfIP: From Network Drivers to RTOS Integration
Dynamic memory can make embedded networking unpredictable. Heap fragmentation can cause allocation failures, while non-deterministic allocation times can interfere with real-time deadlines. Memory corruption and undefined behavior make these failures even harder to reproduce and diagnose. Join us on September 30 at 8 AM PT for this dynamic and informative webinar. wolfIP addresses these challenges […]
Read MoreMore TagLive Webinar: Preparing Connected Devices for the EU Cyber Resilience Act (EU-Friendly Time)
The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements sold in the EU. These requirements affect how connected and embedded products are designed, secured, updated, documented, and maintained throughout their lifecycle. As CRA implementation progresses, engineering and product teams need to stay informed about the latest requirements, timelines, and compliance […]
Read MoreMore TagHigh-Entropy Random Numbers from Oscillator Jitter on C2000 C28x
The LAUNCHXL-F28P55X (TMS320F28P550SJ) features a 150 MHz C28x DSP from TI’s C2000 real-time control family. Designed for motor drives, solar inverters, EV chargers, and digital power supplies, it lacks a hardware TRNG. However, it provides three independent clock sources: two on-chip RC oscillators (INTOSC1 and INTOSC2) and the crystal driving the PLL. Using the chip’s […]
Read MoreMore TagwolfCOSE Adds PSA Attestation and EAT Support
wolfSSL is adding PSA Initial Attestation API 2.0 and RFC 9783 PSA Entity Attestation Token (EAT) support to wolfCOSE. This lets a device prove its identity, security lifecycle state, and boot measurements to a relying party using the compact COSE/CBOR formats already used across the IoT ecosystem. Consistent with wolfCOSE’s design, PSA/EAT is fully off […]
Read MoreMore TagHardware AES for wolfCrypt on the TI C2000 C28x
The TI C2000 family is TI’s real-time control line: the MCUs inside motor drives, solar inverters, EV chargers and digital power supplies. wolfCrypt now drives the hardware AES accelerator on the LAUNCHXL-F28P55X (TMS320F28P550SJ), a 150 MHz C28x DSP with 133 KB RAM and 1088 KB flash. The F28P550SJ carries an on-chip AESA block, a TI […]
Read MoreMore Tag