The wolfSSL team is pleased to announce wolfBoot 2.9.0, expanding hardware support, adding new image and cryptographic options, and continuing security hardening across boot and update flows. More Hardware Targets wolfBoot 2.9.0 adds support for several new platforms, including: STM32N6, STM32U3, STM32C5, STM32G4 and STM32WBA NXP LPC54S018M-EVK and Kinetis KL26 Xilinx Zynq-7000 ZC702 NXP T2080 […]
Read MoreMore TagCategory: Uncategorized
wolfBoot Brings Verified Boot to AArch64 UEFI: Booting Linux on the NVIDIA Jetson Orin Nano
wolfBoot now runs as a native AArch64 UEFI application, extending its measured, cryptographically verified boot to any 64-bit ARM platform that boots through UEFI firmware, and anchoring a complete ARM Root of Trust (RoT) from silicon to the operating system. We validated it end to end on an NVIDIA Jetson Orin Nano Developer Kit, taking […]
Read MoreMore TagwolfJSSE and wolfJCE Now Support Post-Quantum Cryptography
Post-quantum cryptography (PQC) support has been added to wolfSSL’s Java providers! wolfJSSE, our JSSE provider built on the wolfSSL embedded SSL/TLS library, and wolfJCE, our JCE provider built on the wolfCrypt encryption engine, now include the NIST-standardized post-quantum algorithms along with the stateful hash-based signature schemes: ML-KEM (FIPS 203) key encapsulation with parameter sets ML-KEM-512, […]
Read MoreMore TagwolfSSL FIPS for Proxmox: LUKS Disk Encryption
wolfSSL can bring FIPS 140-3 validated crypto to your Proxmox and LUKS deployment. Proxmox encrypts disks with LUKS. wolfCrypt can be the validated engine underneath. How it works The wolfCrypt Linux kernel module registers its ciphers with the linux kernel crypto API. Proxmox dm-crypt then hands LUKS operations to wolfCrypt. Your keys and volume layout […]
Read MoreMore TagQuantum-Ready Avionics: Embedded DTLS and Secure Boot for the Next 30 Years
Aircraft remain in service for decades, but cryptographic standards continue to evolve. Some security decisions are easy to update later. Others aren’t. Learn how embedded DTLS, secure boot, hardware root of trust, and post-quantum cryptography fit together to build avionics platforms that can adapt over a 30-year lifecycle. In this webinar, you’ll learn: Which security […]
Read MoreMore TagwolfBoot Adds Persistent Failure Diagnostics
Ever had a device in the field reject a firmware update or roll back to an older image, with no clue why? wolfBoot can now tell you. With the new WOLFBOOT_PERSIST_FAILURE_STATUS option, wolfBoot records the cause of every update, self-update and rollback failure into a dedicated flash region, so your application can read it back […]
Read MoreMore TagwolfIP Comes to NXP QorIQ Bare-Metal
NXP QorIQ is a family of networking-focused processors built on PowerPC and ARM Layerscape cores, ranging from dual-core parts up to many-core SoCs. Each integrates Ethernet, packet acceleration, and hardware security, and they ship in networking, aerospace, defense, and industrial systems. We have brought wolfIP, our compact TCP/IP stack, to the NXP QorIQ family running […]
Read MoreMore TagwolfBoot as the Xilinx ZynqMP FSBL: a full-featured secure first-stage replacement
wolfBoot can now run as the First Stage Boot Loader (FSBL) on Xilinx ZynqMP, replacing the stock Xilinx FSBL entirely. On a ZCU102 (xczu9eg) the BootROM hands control straight to wolfBoot in on-chip memory (OCM) at EL3; wolfBoot brings up the processing system, verifies a signed image with its own keys, and boots Linux to […]
Read MoreMore TagPost-Quantum Signatures for Signed Messages: ML-DSA in PKCS#7
wolfSSL’s PKCS#7/CMS implementation has long produced and verified SignedData with the signature algorithms you’d expect — RSA and ECDSA. It now speaks post-quantum as well: PKCS#7 SignedData can be signed and verified using ML-DSA, the Module-Lattice-Based Digital Signature Algorithm standardized by NIST in FIPS 204 (formerly CRYSTALS-Dilithium). The encoding follows the conventions the IETF LAMPS […]
Read MoreMore TagwolfSSH now supports X.509 host certificates with TPM-backed keys: Certificate-based host authentication with private keys sealed in hardware
The problem When an SSH client connects to a server, it needs to know it is talking to the real server and not an attacker in the middle. Classic SSH handles this with a raw host key that the client remembers on first connection. That works for a single machine, but it does not scale […]
Read MoreMore Tag