Date: October 6, 2026 Severity: Critical Affected Users: Applications using the wolfSSH client with wolfSSH releases through v1.5.0 that rely on ECDSA host keys. Fixed In: wolfSSH v1.6.0 (PR 1022, issue #1012) Summary A man-in-the-middle could substitute a server’s ECDSA host key with a key on a different curve and still pass signature verification, using […]
Read MoreMore TagMonth: October 2026
SSH Extended Key Usage and OID Collision Mitigation in wolfSSL 5.9.4
With the release of wolfSSL 5.9.4, Extended Key Usage (EKU) support for SSH X509 certificates was added. Under RFC 6187, two SSH key purposes are specified: id-kp-secureShellClient (1.3.6.1.5.5.7.3.21) and id-kp-secureShellServer (1.3.6.1.5.5.7.3.22). Previously the default ASN.1 template parser omitted SSH purposes and neither parser recognized the server purpose; both are now fully parsed. Builds configured with […]
Read MoreMore TagJoin wolfSSL at TPM.dev 2026
Join wolfSSL at TPM.dev 2026 on November 3 for “wolfTPM fTPM with PQC,” presented by wolfSSL Senior Software Engineer David Garske. Built on wolfCrypt, wolfTPM’s firmware TPM provides a TPM 2.0 interface without a discrete TPM chip. Designed for embedded systems, it supports ML-DSA digital signatures and ML-KEM key encapsulation through the TCG TPM 2.0 […]
Read MoreMore TagLIVE WEBINAR: Post-Quantum Integration with wolfTPM and EigenQ
Post-quantum TPM support is only useful when your application can access it. Integrating it means understanding the system architecture. Join wolfSSL and EigenQ for a technical walkthrough of wolfCrypt in EigenQ’s QMA hardware acceleration module, which provides photon-based quantum entropy and random number generation. Follow the integration from QMA architecture to validation via wolfTPM’s TPM […]
Read MoreMore TagMbed TLS After April 2027: What It Means for Your Product
If your product runs Mbed TLS today, 2027 brings a decision. In October 2026 the Mbed TLS team announced that its current maintainers will stop working on the TLS and X.509 libraries in April 2027, one month after the 3.6 LTS branch reaches end of life. Mbed TLS has served embedded developers well for many […]
Read MoreMore TagLIVE WEBINAR: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux
Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. Join us to learn how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You’ll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk […]
Read MoreMore Tagrsyslog / librelp is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
rsyslog / librelp provides system logging and reliable log transport capabilities for Linux and other Unix-like environments. FIPS 140-3 support is available for rsyslog / librelp with wolfCrypt FIPS, tested for use with rsyslog and librelp environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure system logging and […]
Read MoreMore TagRetrofitting Older Platforms for the CRA with a Software SRAM PUF
Upgrading legacy hardware to meet modern security standards doesn’t have to mean costly recalls or hardware redesigns. The wolfCrypt SRAM PUF derives a device-unique cryptographic key directly from the power-on state of a chip’s built-in SRAM. This provides a true hardware-rooted secret (100% in firmware) without adding a separate secure element. It is a practical, […]
Read MoreMore Tagrsync is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
rsync is an open source utility for efficiently transferring and synchronizing files between local and remote systems. FIPS 140-3 support is available for rsync with wolfCrypt FIPS, tested for use with rsync environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure file synchronization, transfer, and backup infrastructure while […]
Read MoreMore TagJoin wolfSSL at FIPS ‘n’ Chips 2026, October 26-27 in Austin, Texas!
FIPS ‘n’ Chips isn’t a typical trade show. It’s where the people who run the FIPS program, CMVP staff, testing labs, and module vendors, meet to talk about the future of validation. This year, much of that conversation turns to AI: how large language models might change the way modules are reviewed, tested, and validated, […]
Read MoreMore Tag