wolfSSL’s new tinytls13 profile against a parity-matched MbedTLS, measured on Cortex-M33, x86_64, and aarch64. wolfSSL and MbedTLS both target small embedded TLS, but configured and built with parity options they are not the same size. The new tinytls13 profile is a TLS 1.3-only build that strips everything which is not TLS 1.3 and defaults to […]
Read MoreMore TagCategory: Uncategorized
wolfBOOT and wolfHSM Yocto Recipes
The wolfBoot recipes in the meta-wolfssl (https://github.com/wolfSSL/meta-wolfssl) Yocto layer can now build wolfCrypt from a wolfSSL source tree you supply. Set `WOLFBOOT_WOLFSSL_SRC = “/path/to/wolfssl”` in `local.conf` and that tree is used in place of the copy the recipe would otherwise fetch into `lib/wolfssl`. The wolfSSL entry drops out of `SRC_URI` entirely, so nothing is downloaded. […]
Read MoreMore TagMongoDB FIPS 140-3 Support with wolfProvider
MongoDB is a document-oriented database platform used to store, manage, and query application data. wolfSSL is currently lab validating MongoDB with wolfProvider to verify operation with wolfCrypt FIPS. Once validation is complete, MongoDB can use FIPS 140-3 validated cryptography through wolfProvider with no code changes to MongoDB and potentially no code changes to applications using […]
Read MoreMore TagLive Webinar – wolfBoot: Achieving CRA Compliance with Secureboot and firmware updates (EU-Friendly Time)
CRA compliance does not end when a product ships. Engineers must maintain firmware integrity, deliver secure updates, manage vulnerabilities, and document the software included in every build. Join us on September 16 at 15:00 CEST (6:00 AM PT) to learn how these CRA obligations translate into firmware design and maintenance decisions. Follow the implementation path […]
Read MoreMore TagIntroducing wolfTrust
wolfTrust is a trusted firmware platform for Arm Cortex-M, now under development at wolfSSL, that brings the full wolfSSL security stack into a single secure runtime. It implements the Arm Firmware Framework for M (FF-M) with source-compatible PSA client interfaces, so applications written for Trusted Firmware-M (TF-M) keep their psa_* calls and simply swap the […]
Read MoreMore TagValkey FIPS 140-3 Support with wolfProvider
Valkey is an open source, high-performance key-value data store used for caching, messaging, and data-intensive applications. wolfSSL is currently lab validating Valkey with wolfProvider to verify operation with wolfCrypt FIPS. Once validation is complete, Valkey can use FIPS 140-3 validated cryptography through wolfProvider with no code changes to Valkey and potentially no code changes to […]
Read MoreMore TagwolfTPM on the NVIDIA Jetson Orin firmware TPM
Most TPMs wolfTPM talks to are things you can hold, such as an SLB9672 or ST33KTPM2X soldered next to the SoC and reached over SPI or I2C. The NVIDIA Jetson Orin has no such chip. Its TPM 2.0 is a firmware TPM: software running as a trusted application inside OP-TEE on the same Cortex-A78AE cores […]
Read MoreMore TagwolfBoot comes to the TI C2000 C28x
wolfBoot, our secure bootloader, now runs on the Texas Instruments C2000 C28x DSP. We brought it up on the LAUNCHXL-F28P55X (TMS320F28P550SJ, 150 MHz). It boots the board directly from flash on a bare power-up, with no debugger attached, and it verifies a signed application before that application ever runs. C2000 parts are the workhorses of […]
Read MoreMore TagPostgreSQL FIPS 140-3 Support with wolfProvider
PostgreSQL is an open-source relational database system used to store, manage, and query application and enterprise data. wolfSSL is currently lab validating PostgreSQL with wolfProvider to verify operation with wolfCrypt FIPS. Once validation is complete, PostgreSQL can use FIPS 140-3 validated cryptography through wolfProvider with no code changes to PostgreSQL and potentially no code changes […]
Read MoreMore TagA firmware TPM inside an AMD Spartan UltraScale+ FPGA
A TPM does not have to be a separate chip. wolfTPM‘s firmware-TPM (fwTPM) is the full TPM 2.0 command engine running as firmware, speaking the same protocol a discrete TPM would. On an FPGA that is a powerful idea: you can place a real root of trust inside the programmable logic you are already building, […]
Read MoreMore Tag