wolfTrust is a trusted firmware platform for Arm Cortex-M, now under development at wolfSSL, that brings the full wolfSSL security stack into a single secure runtime. It implements the Arm Firmware Framework for M (FF-M) with source-compatible PSA client interfaces, so applications written for Trusted Firmware-M (TF-M) keep their psa_* calls and simply swap the […]
Read MoreMore TagCategory: wolfCOSE
wolfCOSE Adds COSE_Key and CBOR APIs for Embedded Credentials
wolfCOSE has added new COSE_Key and CBOR APIs that make it safer and easier to build embedded credential, attestation, WebAuthn, and provisioning systems. The update preserves wolfCOSE’s lightweight, allocation-free design while addressing practical integration gaps around key publication, fixed-size buffers, and nested protocol data. What is Included Public-only COSE_Key encoding that prevents private scalars, seeds, […]
Read MoreMore TagwolfCOSE Now Ships as an STM32Cube Pack
wolfCOSE is now available as an STM32Cube pack, I-CUBE-wolfCOSE, so you can add zero-allocation CBOR and COSE to any STM32 project straight from STM32CubeMX or STM32CubeIDE, with no manual source integration. It builds on the wolfSSL Cube pack, I-CUBE-wolfSSL, for all cryptography. What You Get Cube packs let STM32 developers add a library to a […]
Read MoreMore TagBuilding EUDI Wallet Verifiers on wolfSSL: mDL, CBOR/COSE, and Post-Quantum Credentials
Under eIDAS 2.0, every EU Member State must offer a certified EU Digital Identity Wallet by 24 December 2026, and by December 2027 regulated relying parties in banking, telecom, transport, energy, health, and digital infrastructure must accept them. That second deadline is the one embedded developers should watch: it puts millions of verifier devices into […]
Read MoreMore TagwolfCOSE Example for the NUCLEO-H563ZI
Alongside the new wolfCOSE STM32Cube pack, we now ship a complete, hardware-verified wolfCOSE example for the STM32 NUCLEO-H563ZI. Open the project, generate, build, flash, and watch it sign and verify a COSE message on the H5, with no clock or pin plumbing to figure out yourself. What It Is This is a pre-configured STM32CubeMX project […]
Read MoreMore TagAnnouncing wolfCOSE 1.0.0: Standards-based COSE signing, encryption, and authentication for constrained environments
We are excited to announce the first stable release of wolfCOSE 1.0.0, a complete, zero-allocation C implementation of CBOR (RFC 8949) and COSE (RFC 9052/9053) built on top of wolfCrypt. wolfCOSE brings standards-based signing, encryption, and authentication of CBOR data to even the smallest embedded targets, with a tiny footprint, no dynamic memory, and a […]
Read MoreMore TagwolfCOSE vs The Field: The smallest and fastest COSE library, now with post-quantum ML-DSA at the same cost.
Scope: ES256 (P-256) COSE_Sign1 size and speed plus post-quantum ML-DSA (FIPS 204), wolfCOSE vs t_cose vs COSE-C, with cross-language and on-device results. Method: one identical operation, every library and crypto backend built from source on one machine with identical flags, dead-code eliminated. Desktop: x86_64 Intel i9-11950H, GCC 14.2. On-device: NUCLEO-H563ZI Cortex-M33 at 250 MHz. June […]
Read MoreMore TagwolfCOSE: The First COSE Implementation with ML-DSA – Production-Tested, CAVP-Validated Post-Quantum Signatures in wolfCOSE
If you are signing CBOR payloads on an embedded device and you have started worrying about “harvest now, decrypt later,” that worry now extends to signatures too. Long-lived firmware artifacts, attestation reports, supply-chain manifests: anything signed today with ECDSA or RSA can be retroactively forged by an adversary with a cryptographically relevant quantum computer. wolfCOSE […]
Read MoreMore TagwolfCOSE: What is COSE?
COSE (CBOR Object Signing and Encryption) is a compact binary format for attaching signatures, encryption, or MACs directly to a piece of data, so that the proof travels with the object no matter how it is stored, cached, or forwarded. That is the whole idea. If you know JOSE, JWT, JWS, JWE, COSE is the […]
Read MoreMore TagwolfCOSE: CBOR and COSE on FIPS-Validated wolfCrypt: Announcing wolfCOSE for wolfCrypt
We are excited to announce wolfCOSE for wolfCrypt. It is a zero-allocation C library that implements CBOR (RFC 8949) and COSE (RFC 9052/9053). All six COSE message types are supported: Sign1, Sign, Encrypt0, Encrypt, Mac0, and Mac. Multi-signer, multi-recipient, and countersignature variants are included. Cryptographic operations use wolfCrypt under CMVP certificate #4718. That gives COSE […]
Read MoreMore Tag