wolfTPM v4.1.0 delivers the post-quantum upgrade path we promised in v4.0.0, alongside a major round of firmware TPM (fwTPM) hardening. It delivers three headline capabilities: TPM 2.0 v1.85 Post-Quantum Cryptography: ML-DSA and ML-KEM native and in the fwTPM. fwTPM Hardening: Dictionary Attack protection to the TCG spec, SPDM secured transport, and session, policy, and NV […]
Read MoreMore TagCategory: wolfTPM
Firmware TPM 2.0 (fTPM) on Microchip PolarFire SoC
We just opened a PR adding a wolfTPM Firmware TPM (fTPM) example for the Microchip PolarFire SoC, validated end-to-end on the MPFS250T Video Kit. It runs a full TPM 2.0 service on a dedicated RISC-V hart, isolated from Linux, with no discrete TPM chip and no third-party TEE. Why this matters Most TPM integrations need […]
Read MoreMore TagSSH Host Keys That Never Leave the TPM with wolfSSH and wolfTPM
Many embedded devices generate their SSH server host key in RAM on every boot, then hand it to the SSH stack as a DER buffer. It works, but the private key lives in memory where firmware bugs, cold-boot attacks, or a careless core dump can leak it. For a safety-critical or long-lived product, the host […]
Read MoreMore TagSPDM Support for the wolfTPM Firmware TPM (fTPM)
wolfTPM’s firmware TPM (fTPM) now includes an SPDM responder in fwtpm_server, adding an authenticated, encrypted transport between a host and the software TPM 2.0. It supports both TCG certificate mode and DMTF DSP0274 pre-shared-key (PSK) mode, and is merged in PR #510. A TPM for Environments Without Hardware TPM Support The fTPM is a full […]
Read MoreMore TagwolfTPM fTPM 2.0 for AMD/Xilinx UltraScale+ MPSoC — Space and Safety-Critical Ready
wolfTPM’s firmware TPM (fTPM) is a pure-software, TPM 2.0-compliant module that runs on any 32-bit or larger MCU or co-processor. No discrete TPM chip required. No I2C/SPI bus to manage. Same TPM2_* API on the application side as a hardware TPM, but the TPM logic is yours to place, isolate, and certify alongside the rest […]
Read MoreMore TagwolfTPM on AMD Xilinx
wolfTPM supports any TPM 2.0 compliant TPM as well as TPM 2.0 modules on all AMD Xilinx platforms, including ZynqMP UltraScale+, Versal Gen 1 and Gen 2, Zynq-7000, and Kria SOM. It enables measured boot and a strong hardware root of trust, and includes standard TPM features such as secret sealing for encrypted file systems, […]
Read MoreMore TagwolfTPM Post-Quantum Cryptography Release: ML-DSA and ML-KEM Support via TCG TPM 2.0 Library Specification v1.85
Post-Quantum Support Is Here wolfTPM is available with post-quantum cryptography support added through the TCG TPM 2.0 Library Specification v1.85. ML-DSA (FIPS 204) signing and ML-KEM (FIPS 203) key encapsulation are now supported by the wolfTPM client library against any v1.85-capable TPM 2.0 target. The work merged in PR #445. New v1.85 Commands The following […]
Read MoreMore TagwolfTPM fTPM v1.85 Post-Quantum
Full Release Overview wolfTPM’s firmware TPM (fTPM) is available with full TCG TPM 2.0 Library Specification v1.85 post-quantum support. This release adds the eight new v1.85 commands, the ML-DSA and ML-KEM algorithm structures, and supporting infrastructure (examples, unit tests, NIST ACVP known-answer-tests, a libFuzzer harness) to wolfSSL’s portable software TPM 2.0 implementation. The work merged […]
Read MoreMore TagOTA Demonstrator with wolfBoot, wolfTPM and wolfMQTT
Our new demonstrator is available on GitHub. This demonstrator showcases a secure over-the-air (OTA) firmware update workflow using wolfSSL components and a software TPM. It integrates: wolfBoot for secure boot loader wolfTPM for root of trust wolfMQTT for update delivery wolfSSL / wolfCrypt for secure communication and verification The demo runs on Linux and can […]
Read MoreMore TagKeystores and Secure Elements supported by wolfSSL In 2026
When looking to store your cryptographic secrets, it is important to have a good platform to store them on. Even more important is the ease of accessing and using those secrets. With wolfTPM, we have support for all TPM 2.0 APIs. Additionally, we provide the following wrappers: Key Generation/Loading RSA encrypt/decrypt ECC sign/verify ECDH NV […]
Read MoreMore Tag