socat is a command-line networking utility used to establish bidirectional data connections between files, sockets, network protocols, and other data channels. FIPS 140-3 support is available for socat with wolfCrypt FIPS, tested for use with socat environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure network communications and […]
Read MoreMore TagCategory: Uncategorized
Vulnerability Disclosure: wolfSSH (CVE-2026-81535)
Date: October 6, 2026 Severity: Medium Affected Users: Applications built with –enable-fwd (port forwarding), wolfSSH versions 1.4.8 through 1.5.0. Fixed In: wolfSSH v1.6.0 (PR 1059, 1148, 1220) Summary With forwarding enabled, wolfSSH admitted forwarded-tcpip channel opens without consulting the application’s forwarding policy callback, and a client accepted them for forwards it had never requested. A […]
Read MoreMore TagwolfBoot adds secure boot support for the Analog Devices MAX32666
wolfSSL is pleased to announce that wolfBoot, our secure botoloader, now supports the Analog Devices MAX32665 and MAX32666 microcontrollers (formerly Maxim Integrated). The port was added in wolfBoot PR #804, and it has been tested on the MAX32666FTHR and MAX32666FTHR2 boards, bringing signed firmware verification and wolfBoot’s A/B update flow to this Bluetooth LE microcontroller […]
Read MoreMore TagSAMBA is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
Samba is an open source implementation of the SMB networking protocol used for file and print sharing, authentication, and interoperability between Linux, Unix, and Windows systems. FIPS 140-3 support is available for Samba with wolfCrypt FIPS, tested for use with Samba environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps […]
Read MoreMore TagVulnerability Disclosure: wolfSSH (CVE-2026-16516)
Date: October 6, 2026 Severity: Critical Affected Users: Applications using the wolfSSH client with wolfSSH releases through v1.5.0 that rely on ECDSA host keys. Fixed In: wolfSSH v1.6.0 (PR 1022, issue #1012) Summary A man-in-the-middle could substitute a server’s ECDSA host key with a key on a different curve and still pass signature verification, using […]
Read MoreMore TagSSH Extended Key Usage and OID Collision Mitigation in wolfSSL 5.9.4
With the release of wolfSSL 5.9.4, Extended Key Usage (EKU) support for SSH X509 certificates was added. Under RFC 6187, two SSH key purposes are specified: id-kp-secureShellClient (1.3.6.1.5.5.7.3.21) and id-kp-secureShellServer (1.3.6.1.5.5.7.3.22). Previously the default ASN.1 template parser omitted SSH purposes and neither parser recognized the server purpose; both are now fully parsed. Builds configured with […]
Read MoreMore TagJoin wolfSSL at TPM.dev 2026
Join wolfSSL at TPM.dev 2026 on November 3 for “wolfTPM fTPM with PQC,” presented by wolfSSL Senior Software Engineer David Garske. Built on wolfCrypt, wolfTPM’s firmware TPM provides a TPM 2.0 interface without a discrete TPM chip. Designed for embedded systems, it supports ML-DSA digital signatures and ML-KEM key encapsulation through the TCG TPM 2.0 […]
Read MoreMore TagLIVE WEBINAR: Post-Quantum Integration with wolfTPM and EigenQ
Post-quantum TPM support is only useful when your application can access it. Integrating it means understanding the system architecture. Join wolfSSL and EigenQ for a technical walkthrough of wolfCrypt in EigenQ’s QMA hardware acceleration module, which provides photon-based quantum entropy and random number generation. Follow the integration from QMA architecture to validation via wolfTPM’s TPM […]
Read MoreMore TagMbed TLS After April 2027: What It Means for Your Product
If your product runs Mbed TLS today, 2027 brings a decision. In October 2026 the Mbed TLS team announced that its current maintainers will stop working on the TLS and X.509 libraries in April 2027, one month after the 3.6 LTS branch reaches end of life. Mbed TLS has served embedded developers well for many […]
Read MoreMore TagLIVE WEBINAR: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux
Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. Join us to learn how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You’ll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk […]
Read MoreMore Tag