wolfSSL now supports using the Cryptographic Services Engine (CSE) on NXP S32K1 microcontrollers for hardware-accelerated cryptography. The CSE is a secure coprocessor integrated into automotive-grade microcontrollers like the S32K148, providing AES acceleration, hardware TRNG, and secure key storage. The port uses wolfSSL’s Crypto Callback mechanism, so when operations aren’t supported by CSE hardware (like AES-192/256), […]
Read MoreMore TagCategory: wolfSSL/ wolfCrypt
Strengthening DTLS Reliability in wolfSSL 5.8.2 and 5.8.4
wolfSSL was the first (D)TLS library to support DTLS 1.3 and continues to advance DTLS security and reliability. The 5.8.2 and 5.8.4 releases deliver focused fixes that strengthen DTLS handshakes, parsing, and stateless operation. Below are the most impactful DTLS improvements. DTLS 1.3 Early Data in Stateless Accept (PR #9367) Applications can now access DTLS […]
Read MoreMore TagAnnouncing the 1.0 Release of the wolfssl-wolfcrypt Rust Crate
We are excited to announce the 1.0.0 release of the wolfssl-wolfcrypt Rust crate, now officially published to crates.io! This release signifies a major milestone, offering stable, secure, and efficient cryptographic wrappers for Rust developers leveraging the power of wolfCrypt. The crate provides a direct, user-friendly interface to wolfCrypt’s robust cryptographic primitives, ensuring your Rust applications […]
Read MoreMore TagwolfSSL adds support for libspdm 3.7.0
wolfSSL now includes updated support for libspdm 3.7.0. libspdm is the reference implementation of the DMTF’s Security Protocols and Data Models (SPDM) specifications, which provide device attestation, authentication, and mechanisms for establishing secure communications over any transport. Both wolfSSL and SPDM are designed to be transport-agnostic, making them a good fit together. Download wolfSSL → […]
Read MoreMore TagwolfCrypt FreeBSD kernel module support
wolfSSL in the kernel The last year has been quite active for wolfSSL in kernel space. To give a quick recap, we’ve added support to register wolfCrypt algs in the Linux kernel crypto API (making them available for filesystem encryption, IPsec, etc) wrote patches for Linux /dev/random, giving it FIPS-compliant wolfCrypt implementations introduced wolfGuard, a […]
Read MoreMore TagwolfCrypt Now Supported in ST’s STSAFE SDK (STSELib)
The STMicroelectronics STSELib now includes built-in wolfCrypt support for the STSAFE-A120 secure element. Download wolfSSL → What is the STSAFE-A120? The STSAFE-A120 is ST’s latest secure element running on a CC EAL5+ certified platform. Key features include: Authentication with X.509 certificates (Qi 2.0, Matter compatible) TLS 1.2/1.3 handshake support ECC curves: NIST P-256/P-384/P-521, Brainpool, Ed25519, […]
Read MoreMore TagLess is More: Community Contributions That Make wolfSSL Stronger
At wolfSSL, we continuously work to keep our TLS and cryptography engine fast, portable, secure, and lightweight. Most improvements come in the form of new features, optimizations, or platform ports. But sometimes the most valuable contributions are the ones that simplify the code rather than expand it. A recent community contribution highlighted exactly this. Pull […]
Read MoreMore TagNew Feature: Copy and Free Callbacks for Hardware Acceleration
wolfSSL 5.8.4 (PR#9309) has expanded the crypto callback api to include support for copy and free operations. This addition addresses a lifecycle management challenge for developers integrating hardware security modules (HSM) or hardware accelerators. Download wolfSSL → The Capability Previously, wolfSSL’s default behavior for duplicating a hash context was a standard memory copy. While efficient […]
Read MoreMore TagExpanded Rust API for wolfSSL
Rust is a modern programming language known for its focus on memory safety and performance, making it a powerful choice for systems programming, including security-sensitive applications. To bridge the gap between Rust’s strong guarantees and the mature, high-performance cryptography provided by the wolfSSL library, we have developed and are continuing to improve a comprehensive set […]
Read MoreMore TagML-KEM and ML-DSA Improvements in wolfSSL 5.8.4
Version 5.8.4 improves wolfSSL’s implementation of ML-KEM (formerly Kyber) and ML-DSA (formerly Dilithium) post-quantum algorithms. Download wolfSSL → Bug Fixes The ML-KEM derive secret operation was corrected to properly compute shared secrets; there was a miscalculation of an offset in a buffer. An out-of-bounds read was fixed in the ML-KEM/Kyber 5-bit value decomposition code, where […]
Read MoreMore Tag