wolfTPM now has an integrated fTPM (firmware TPM) implementation built for the purpose of running within TrustZone for maximizing security! Why run an fTPM? Late breaking requirements come in to add a TPM to the design, but you didn’t include a hardware TPM on your board. You ship in high volumes and want TPM quality […]
Read MoreMore TagCategory: Uncategorized
wolfSSL JNI/JSSE 1.17.0 Now Available
wolfSSL JNI/JSSE 1.17.0 is now available for download! This release brings JSSE?level PSK support, Java Platform Module System (JPMS) compatibility, SSLEngine hardening, a large expansion of X.509 and CRL capabilities at the JNI layer, and two new properties for FIPS and native library loading. Along with the new functionality, 1.17.0 contains a substantial set of […]
Read MoreMore TagHow to Get CRA-Ready: Secure Devices and Simplify Compliance
The EU Cyber Resilience Act (CRA) is about to reshape how every connected device is designed, secured, and maintained. As the CRA introduces new expectations for secure development and long-term product protection, teams need a clear understanding of what will change and how to prepare. In this webinar on April 30 at 8 AM PT, […]
Read MoreMore TagGuidance for FIPS Customers: Auditing Direct Calls to wc_ecc_verify_hash()
The fix for CVE-2026-5194 is available in wolfSSL 5.9.1. Upgrading to the new version resolves the issue for TLS, DTLS, and X.509 users. FIPS customers need to take a closer look. FIPS users who call wc_ecc_verify_hash() or wc_ecc_verify_hash_ex() directly may remain exposed until they add a small check at their call sites. The required check […]
Read MoreMore TagFortifying Mission-Critical Systems: Where Cybersecurity Meets Radiation Protection
Secure boot in space isn’t just about signing firmware. It has to survive radiation faults, long-mission lifecycles and limited update windows. Join VORAGO Technologies and wolfSSL on April 29 at 9 AM PT for a technical session on implementing secure boot in real satellite environments. In orbit, your hardware and software are under constant assault. […]
Read MoreMore TagWhy C Remains the Gold Standard for Cryptographic Software
Executive Summary For production cryptographic software, memory safety alone does not define security. Real-world crypto must run on every platform, maintain stable assumptions over decades, and allow explicit control over hardware behavior. While memory-safe languages like Rust offer real benefits, serious cryptographic implementations inevitably rely on unsafe code, assembly, and low-level control, eroding those guarantees. […]
Read MoreMore TagwolfSSL now supports GRPC on Zephyr
The people have been asking for GRPC on Zephyr, and wolfSSL has delivered. We support it with both our FIPS encryption and without FIPS. Contact us at facts@wolfssl.com or call us at +1 425 245 8247 if you have questions about any of the above.
Read MoreMore TagAnnouncing wolfTPM v4.0.0
wolfTPM v4.0.0 is our largest release to date. It delivers three headline capabilities: Firmware TPM (fwTPM) – a portable TPM 2.0 built on wolfCrypt. SPDM Secured Transport – encrypted host-to-TPM communication. ST33 TPM 2.0 Firmware Update – new update tool for STMicro ST33KTPM2X. All three are powered by the same wolfCrypt engine trusted in FIPS […]
Read MoreMore TagwolfBoot Secure Boot on the STM32N6
wolfSSL is announcing wolfBoot support for the STM32N6 series added in PR #720, starting with the NUCLEO-N657X0-Q development board (STM32N657X0H). The STM32N6 is ST’s first Cortex-M55 microcontroller, designed for high-performance edge AI workloads with a dedicated Neural Processing Unit (NPU). wolfBoot provides cryptographic signature verification and secure firmware updates on this new platform. Getting started […]
Read MoreMore TagwolfBoot Adds SD Card Secure Boot for Xilinx Zynq UltraScale+ MPSoC
wolfBoot now supports SD card boot on the AMD/Xilinx Zynq UltraScale+ MPSoC (PR #699). This brings authenticated, signature-verified boot of Linux directly from SD card partitions on the ZCU102 evaluation kit, complementing the existing QSPI flash boot path that has been the sole production boot option until now. The ZCU102 (quad-core Cortex-A53, dual Cortex-R5, FPGA […]
Read MoreMore Tag