wolfSSL is pleased to announce that wolfBoot, our secure botoloader, now supports the Analog Devices MAX32665 and MAX32666 microcontrollers (formerly Maxim Integrated). The port was added in wolfBoot PR #804, and it has been tested on the MAX32666FTHR and MAX32666FTHR2 boards, bringing signed firmware verification and wolfBoot’s A/B update flow to this Bluetooth LE microcontroller […]
Read MoreMore TagMonth: October 2026
SAMBA is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
Samba is an open source implementation of the SMB networking protocol used for file and print sharing, authentication, and interoperability between Linux, Unix, and Windows systems. FIPS 140-3 support is available for Samba with wolfCrypt FIPS, tested for use with Samba environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps […]
Read MoreMore TagVulnerability Disclosure: wolfSSH (CVE-2026-16516)
Date: October 6, 2026 Severity: Critical Affected Users: Applications using the wolfSSH client with wolfSSH releases through v1.5.0 that rely on ECDSA host keys. Fixed In: wolfSSH v1.6.0 (PR 1022, issue #1012) Summary A man-in-the-middle could substitute a server’s ECDSA host key with a key on a different curve and still pass signature verification, using […]
Read MoreMore TagSSH Extended Key Usage and OID Collision Mitigation in wolfSSL 5.9.4
With the release of wolfSSL 5.9.4, Extended Key Usage (EKU) support for SSH X509 certificates was added. Under RFC 6187, two SSH key purposes are specified: id-kp-secureShellClient (1.3.6.1.5.5.7.3.21) and id-kp-secureShellServer (1.3.6.1.5.5.7.3.22). Previously the default ASN.1 template parser omitted SSH purposes and neither parser recognized the server purpose; both are now fully parsed. Builds configured with […]
Read MoreMore TagJoin wolfSSL at TPM.dev 2026
Join wolfSSL at TPM.dev 2026 on November 3 for “wolfTPM fTPM with PQC,” presented by wolfSSL Senior Software Engineer David Garske. Built on wolfCrypt, wolfTPM’s firmware TPM provides a TPM 2.0 interface without a discrete TPM chip. Designed for embedded systems, it supports ML-DSA digital signatures and ML-KEM key encapsulation through the TCG TPM 2.0 […]
Read MoreMore TagLIVE WEBINAR: Post-Quantum Integration with wolfTPM and EigenQ
Post-quantum TPM support is only useful when your application can access it. Integrating it means understanding the system architecture. Join wolfSSL and EigenQ for a technical walkthrough of wolfCrypt in EigenQ’s QMA hardware acceleration module, which provides photon-based quantum entropy and random number generation. Follow the integration from QMA architecture to validation via wolfTPM’s TPM […]
Read MoreMore TagMbed TLS After April 2027: What It Means for Your Product
If your product runs Mbed TLS today, 2027 brings a decision. In October 2026 the Mbed TLS team announced that its current maintainers will stop working on the TLS and X.509 libraries in April 2027, one month after the 3.6 LTS branch reaches end of life. Mbed TLS has served embedded developers well for many […]
Read MoreMore TagLIVE WEBINAR: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux
Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. Join us to learn how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You’ll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk […]
Read MoreMore Tagrsyslog / librelp is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
rsyslog / librelp provides system logging and reliable log transport capabilities for Linux and other Unix-like environments. FIPS 140-3 support is available for rsyslog / librelp with wolfCrypt FIPS, tested for use with rsyslog and librelp environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure system logging and […]
Read MoreMore TagRetrofitting Older Platforms for the CRA with a Software SRAM PUF
Upgrading legacy hardware to meet modern security standards doesn’t have to mean costly recalls or hardware redesigns. The wolfCrypt SRAM PUF derives a device-unique cryptographic key directly from the power-on state of a chip’s built-in SRAM. This provides a true hardware-rooted secret (100% in firmware) without adding a separate secure element. It is a practical, […]
Read MoreMore Tag