wolfBoot can now be the first stage boot loader (FSBL) on the AMD Zynq UltraScale+ MPSoC. The BootROM authenticates wolfBoot into the 256 KB OCM and enters it at EL3. wolfBoot brings up the processing system (PLLs, DDR, MIO, clocks) and boots Linux from a wolfBoot-signed FIT. Validated end to end on a ZCU102 to […]
Read MoreMore TagCategory: Uncategorized
LIVE WEBINAR: Quantum-Ready Avionics: Embedded DTLS and Secure Boot for the Next 30 Years
Aircraft remain in service for decades, but cryptographic standards continue to evolve. Some security decisions are easy to update later. Others aren’t. Join us to Learn how embedded DTLS, secure boot, hardware root of trust, and post-quantum cryptography fit together to build avionics platforms that can adapt over a 30-year lifecycle. In this webinar, you’ll […]
Read MoreMore TagReducing Yocto and OpenWRT RAM Usage by Switching from OpenSSL to wolfSSL
On Yocto Linux Scarthgap, the wolfSSL endpoint process peaks at 10–13 KB of heap + stack, compared with 750–790 KB for OpenSSL, for an ECDHE P-256 / ECDSA P-256 / AES-128-GCM connection. These figures apply in both directions and to both TLS 1.2 and TLS 1.3. On OpenWRT using uclient-fetch to grab 100k of data, […]
Read MoreMore TagSecure Boot for the Raspberry Pi Compute Module 4 with wolfBoot and FIPS 140-3
The Raspberry Pi Compute Module 4 (CM4) is a popular choice for industrial edge devices, but out of the box nothing enforces a hardware-rooted chain of trust over the OS it boots. wolfBoot now targets the CM4 (Broadcom BCM2711, quad-core Cortex-A72), replacing U-Boot with a verified boot chain rooted in your own keys. How It […]
Read MoreMore TagVulnerability Disclosure: wolfSSH (CVE-2026-83742)
Date: October 6, 2026 Severity: Medium Affected Users: Servers and applications using wolfSSH versions 1.4.11 through 1.5.0 on non-Windows platforms. Applications that call wolfSSH_RealPath() directly are additionally exposed (see below). Fixed In: wolfSSH v1.6.0 (PR 1084) Summary wolfSSH_RealPath() could be driven to write one byte past the end of a stack buffer. A crafted SFTP […]
Read MoreMore TagSeven CRA Compliance Questions to Ask Your Cybersecurity Supplier
The Cyber Resilience Act (CRA) raises the bar for manufacturers of products that include electronics. For CRA, cybersecurity suppliers need to support vulnerability management, regulatory reporting, long-term maintenance, and compliance documentation. These seven questions determine whether a supplier is prepared. 1. How Are Firmware and Software Updates Protected? Are updates authenticated before installation? Does the […]
Read MoreMore TagwolfPKCS11 2.2.0 Released
We are pleased to announce the release of wolfPKCS11 2.2.0. This release adds verify-only support for the LMS/HSS and XMSS/XMSS^MT stateful hash-based signature schemes, an option to ship wolfPKCS11 as a single self-contained library with wolfSSL linked in, and much faster token writes on custom storage backends. It also delivers a large round of PKCS#11 […]
Read MoreMore TagwolfBoot Secure Boot for the NXP RW612
wolfBoot now supports the NXP RW612 wireless MCU on the FRDM-RW612 board, available in PR #926. wolfBoot verifies signed firmware before it runs and every update before it is installed, with optional TrustZone isolation between the bootloader and the application. About the chip The RW612 combines Wi-Fi 6, Bluetooth Low Energy and 802.15.4 radios with […]
Read MoreMore TagVulnerability Disclosure: wolfSSH (CVE-2026-84897)
Date: October 6, 2026 Severity: Medium Affected Users: Operators of wolfSSH servers, wolfSSH versions 1.2.0 through 1.5.0. Builds with WOLFSSH_NO_DH_GEX_SHA256 defined are not affected. Fixed In: wolfSSH v1.6.0 (PR 1221) Summary A wolfSSH server accepted two key exchange messages that only a server should ever send. An unauthenticated client could use one of them to […]
Read MoreMore TagwolfBoot adds ARM Compiler for Embedded support on STM32U5
wolfBoot can now be built for the STM32U5 with the ARM Compiler for Embedded (AC6). Teams using the ARM toolchain in Keil MDK can build a TrustZone-enabled wolfBoot image and its non-secure test application from the existing Makefiles by setting USE_ARMCLANG=1. What the integration includes The build selects armclang, armlink, armar and fromelf for target […]
Read MoreMore Tag