wolfCrypt now includes a native implementation of Falcon-512 and Falcon-1024, the lattice-based post-quantum signature algorithm selected by NIST for upcoming standardization as FN-DSA. The new implementation replaces wolfSSL’s previous liboqs-based Falcon integration. Falcon is now built directly into wolfCrypt, removing the external dependency while improving portability, hardware integration, and control across desktop, embedded, and kernel […]
Read MoreMore TagCategory: Uncategorized
wolfSSL Adds FrodoKEM Post-Quantum Key Encapsulation
wolfSSL is pleased to announce support for FrodoKEM in wolfCrypt. FrodoKEM joins ML-KEM (FIPS 203), ML-DSA (FIPS 204), LMS/HSS and XMSS/XMSS^MT in our growing post-quantum portfolio, and it fills a specific gap: a conservative, unstructured-lattice KEM for users who want their quantum-safe key exchange to rest on a different hardness assumption. Why FrodoKEM? ML-KEM is […]
Read MoreMore TagwolfTPM Firmware TPM: Post-Quantum TPM 2.0 (v1.85) on an FPGA Soft-Core
Aerospace, defense, industrial, medical, and energy platforms need a hardware Root of Trust, yet a discrete TPM chip is one more component to procure, qualify, and fit on a board that may run for decades. What if the TPM were simply part of the FPGA you already built? This example runs wolfTPM’s Firmware TPM (fTPM), […]
Read MoreMore TagwolfBoot now uses wolfCOSE for DICE attestation
wolfBoot now uses wolfCOSE as a reusable COSE and CBOR foundation for its existing DICE attestation capability. wolfBoot already provides DICE-based device identity and attestation, and we are now integrating wolfCOSE as the stable, reusable COSE and CBOR layer behind that support. The integration replaces the earlier local token-encoding path with wolfCOSE for creating signed […]
Read MoreMore TagwolfSSL is bringing hardware key isolation to the Altera Agilex 5 SoC FPGA
wolfSSL is adding native support for the Secure Device Manager (SDM) hardened crypto services on Altera Agilex 5 devices. The new port connects wolfCrypt directly to the FPGA Crypto Services (FCS) stack, so keys can live where Linux cannot reach them: inside the SDM itself. Applications get that isolation through the same wolfSSL APIs they […]
Read MoreMore TagwolfCOSE Now Ships as an STM32Cube Pack
wolfCOSE is now available as an STM32Cube pack, I-CUBE-wolfCOSE, so you can add zero-allocation CBOR and COSE to any STM32 project straight from STM32CubeMX or STM32CubeIDE, with no manual source integration. It builds on the wolfSSL Cube pack, I-CUBE-wolfSSL, for all cryptography. What You Get Cube packs let STM32 developers add a library to a […]
Read MoreMore TagwolfSSL vs OpenSSL: Which Fits Your Application?
Should you continue with OpenSSL or migrate to wolfSSL? API compatibility is only the starting point when the library must also fit your target, resource limits, and security requirements. Join this webinar for an engineering comparison of wolfSSL and OpenSSL. See what an OpenSSL 3.x migration involves, where switching makes technical sense, and when remaining […]
Read MoreMore TagwolfCrypt FIPS 140-3 Post-Quantum Certificate
Adding post-quantum algorithms to a FIPS module requires more than adding new algorithms. It changes the module boundary, RNG testing, integrity checks, entropy validation, and operational testing. Join this webinar for an early look at wolfCrypt v7.0.0 and the engineering work required to bring NIST-standardized post-quantum algorithms inside the FIPS 140-3 boundary. This webinar will […]
Read MoreMore TagBuilding EUDI Wallet Verifiers on wolfSSL: mDL, CBOR/COSE, and Post-Quantum Credentials
Under eIDAS 2.0, every EU Member State must offer a certified EU Digital Identity Wallet by 24 December 2026, and by December 2027 regulated relying parties in banking, telecom, transport, energy, health, and digital infrastructure must accept them. That second deadline is the one embedded developers should watch: it puts millions of verifier devices into […]
Read MoreMore TagInside wolfCert: A Deep Dive into SCEP and EST
When we introduced wolfCert, we said it speaks two certificate enrollment protocols, EST and SCEP, both over HTTP(S). That one line hides a lot of detail. This post opens it up: what each protocol actually is, how they differ, how wolfCert implements and exposes them, and why the design leans hard toward embedded and bare-metal […]
Read MoreMore Tag