What is 802.1AE? 802.1AE (MACsec) is a network layer 2 protocol for protecting ethernet frames with encryption and authentication across ethernet links. It introduces a new MACsec ethernet frame format, which carries an additional security tag (SecTAG) field inserted between the ethernet header and payload, as well as an integrity check value (ICV) trailer field […]
Read MoreMore TagCategory: wolfCrypt FIPS
FIPS-Certified WireGuard
As WireGuard continues to grow in popularity for its simplicity and efficiency in VPN deployments, security-conscious organizations are increasingly demanding solutions that adhere to stringent security standards, such as FIPS 140-3 or CMMC 2.0. FIPS certification is a key requirement for governmental agencies and industries like defense and healthcare, where secure cryptographic implementations are mandatory […]
Read MoreMore TagSecuring UEFI with wolfSSL’s FIPS 140-3 Cryptography
One of the biggest strengths of the wolfSSL portfolio is its ability to adapt and run in the most diverse environments, whether it’s a minimal bare-metal deployment or a complex, multi-layered operating system. This blog highlights recent improvements in the wolfSSL products regarding integration with the Unified Extensible Firmware Interface (UEFI)—the modern way to interface […]
Read MoreMore TagFIPS 140-3 Compliance for GnuTLS
We’re excited to announce the next phase in our wolfCrypt-GnuTLS integration: full FIPS 140-2 Level 2 compliance and FIPS 140-3 validation capabilities! This enhancement builds directly on our ongoing work to bring wolfCrypt’s powerful cryptographic capabilities to GnuTLS. Unlike traditional approaches that require extensive application rewrites, our solution continues to operate entirely behind the scenes. […]
Read MoreMore TagwolfSSL: Pioneering the Next Evolution of FIPS 140-3 Security! – Part 3
While having “all the algorithms, modes, and key sizes” available is nice, sometimes it is too much. wolfSSL is pleased to offer FIPS 140-3 tailoring services. We can take any of our larger FIPS 140-3 module(s), strip them down to just the bare essentials, and validate just the subset. Need only ECDSA (verify) and SHA-512 […]
Read MoreMore TagwolfSSL: Pioneering the Next Evolution of FIPS 140-3 Security! – Part 2
wolfSSL is launching new FIPS 140-3 level 2 and level 3 validation services to make achieving compliance easier than ever. Our team will test our software module on your target hardware for Level 2 and Level 3, guiding your device through the validation process with little to no burden on your team. You provide the […]
Read MoreMore TagwolfSSL: Pioneering the Next Evolution of FIPS 140-3 Security! – Part 1
Building on our legacy of FIPS 140-3 certified solutions, wolfSSL is in the planning stages of forging our
Read MoreMore TagFirefox Gets FIPS 140-3 Power: wolfPKCS11 Unleashes wolfCrypt in NSS!
wolfSSL is thrilled to announce a significant milestone in browser security: the successful integration of wolfPKCS11 to provide FIPS 140-3 validated cryptography for the Mozilla Firefox browser. This is achieved by enabling wolfPKCS11 to serve as the backend cryptographic provider for Firefox’s Network Security Services (NSS) layer. This development represents a major step forward, bringing […]
Read MoreMore TagwolfSSL Inc. achieves first major maintenance submission post FIPS 140-3 validation
wolfSSL is thrilled to announce a significant achievement! Following receipt of our FIPS 140-3 validated certificate #4718 last July, wolfSSL completed the first update to that certificate. On May 16, 2025, the wolfSSL OEUP submission, encompassing a batch of 25 Operating Environments, received approval from the CMVP. The exceptional reviews provided by our trusted FIPS […]
Read MoreMore TagwolfSSL Inc. SP800-140C, SP800-140D and Post-Quantum efforts update!
This is an update to previous post wolfSSL Inc. SP800-140C and Post-Quantum efforts update! The National Institute of Standards and Technology (NIST) has recently updated its guidelines, enabling the certification of several post-quantum cryptographic algorithms through the Cryptographic Module Validation Program (CMVP). Notably, the digital signature algorithms ML-DSA (CRYSTALS-Dilithium), SLH-DSA, LMS, and XMSS are now […]
Read MoreMore Tag