wolfBoot now boots a signed application from an SD card on the NXP LS1028A, so the boot image lives on removable storage instead of NOR flash. Booting from the card Loads the signed image over the on chip eSDHC controller and verifies it before handing over control. Uses A/B partitions on a GPT or MBR […]
Read MoreMore TagCategory: Uncategorized
wolfSSL supports the S32K3 ACE Accelerator
wolfSSL now supports offloading AES-ECB and AES-CMAC operations on S32K3 family devices equipped with the ACE accelerator. This accelerator is featured specifically on the S32K388 and S32K389. The ACE accelerator provides a significant speedup compared to our software implementation and the native HSE operations available on the S32K3. This means you can keep your keys […]
Read MoreMore TagwolfCOSE Adds COSE HPKE Encryption
wolfSSL is adding Hybrid Public Key Encryption (HPKE) support to wolfCOSE. HPKE, standardized in RFC 9180, combines a KEM, a KDF, and an AEAD into a modern, misuse-resistant public-key encryption scheme, and bringing it to COSE lets constrained and IoT devices encrypt CBOR-based messages to one or many recipients without hand-rolled key wrapping. The feature […]
Read MoreMore TagThe wolfMQTT Broker: Persistence, Encryption at Rest, and a Round of Hardening
For ten years, wolfMQTT operated purely as a client library. With v2.0.0, we introduced its counterpart: a lightweight MQTT broker built on the same codebase, maintaining our strict footprint requirements and TLS stack. Over the last two releases, we’ve added core features needed to survive process restarts, along with fixes for edge cases that surface […]
Read MoreMore TagwolfCOSE Adds Post-Quantum LMS Signatures
wolfSSL is adding RFC 8778 HSS/LMS stateful hash-based signature support to wolfCOSE, giving COSE a NIST-approved, quantum-resistant signing option today. Hash-based signatures are attractive for firmware and long-lived attestation because their security rests only on the hash function, and bringing LMS to COSE lets customers adopt post-quantum signing inside the compact CBOR message formats they […]
Read MoreMore TagwolfSSL 5.9.4 Release Blog
wolfSSL 5.9.4 is now available with new cryptographic algorithms, expanded post-quantum support, new hardware ports, significant assembly performance work, and a number of vulnerability fixes. Users are always recommended to stay up to date with wolfSSL releases. In this release the use cases affected by high severity reports are: trusted peer certificates (WOLFSSL_TRUST_PEER_CERT, including builds […]
Read MoreMore TagLive Webinar – Porting wolfIP: From Network Drivers to RTOS Integration
Dynamic memory can make embedded networking unpredictable. Heap fragmentation can cause allocation failures, while non-deterministic allocation times can interfere with real-time deadlines. Memory corruption and undefined behavior make these failures even harder to reproduce and diagnose. Join us on September 30 at 8 AM PT for this dynamic and informative webinar. wolfIP addresses these challenges […]
Read MoreMore TagLive Webinar: Preparing Connected Devices for the EU Cyber Resilience Act (EU-Friendly Time)
The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements sold in the EU. These requirements affect how connected and embedded products are designed, secured, updated, documented, and maintained throughout their lifecycle. As CRA implementation progresses, engineering and product teams need to stay informed about the latest requirements, timelines, and compliance […]
Read MoreMore TagHigh-Entropy Random Numbers from Oscillator Jitter on C2000 C28x
The LAUNCHXL-F28P55X (TMS320F28P550SJ) features a 150 MHz C28x DSP from TI’s C2000 real-time control family. Designed for motor drives, solar inverters, EV chargers, and digital power supplies, it lacks a hardware TRNG. However, it provides three independent clock sources: two on-chip RC oscillators (INTOSC1 and INTOSC2) and the crystal driving the PLL. Using the chip’s […]
Read MoreMore TagwolfCOSE Adds PSA Attestation and EAT Support
wolfSSL is adding PSA Initial Attestation API 2.0 and RFC 9783 PSA Entity Attestation Token (EAT) support to wolfCOSE. This lets a device prove its identity, security lifecycle state, and boot measurements to a relying party using the compact COSE/CBOR formats already used across the IoT ecosystem. Consistent with wolfCOSE’s design, PSA/EAT is fully off […]
Read MoreMore Tag