wolfSSL now offloads cryptography to the Silicon Labs EFR32 Series 2 Secure Element through wolfCrypt crypto callbacks. Define WOLFSSL_SILABS_CRYPTOCB, and your application code does not change. This covers wolfCrypt and TLS together. Because operations route by device id rather than by a compile time hook, the same offload serves a direct wolfCrypt API call and […]
Read MoreMore TagCategory: wolfSSL/ wolfCrypt
Hardware Crypto for the Nuvoton NuMicro M2354
wolfSSL now runs its cryptography on the hardware accelerators of the Nuvoton NuMicro M2354, an Arm Cortex-M23 microcontroller with TrustZone. Hashing, AES, RSA, and elliptic curve operations move off the CPU and onto the chip’s CRPT engine. Offloads SHA-1 through SHA-512, AES in ECB, CBC and CTR modes, AES-GCM and AES-CCM authenticated encryption, RSA, ECDSA […]
Read MoreMore TagwolfSSL supports the S32K3 ACE Accelerator
wolfSSL now supports offloading AES-ECB and AES-CMAC operations on S32K3 family devices equipped with the ACE accelerator. This accelerator is featured specifically on the S32K388 and S32K389. The ACE accelerator provides a significant speedup compared to our software implementation and the native HSE operations available on the S32K3. This means you can keep your keys […]
Read MoreMore TagwolfSSL 5.9.4 Release Blog
wolfSSL 5.9.4 is now available with new cryptographic algorithms, expanded post-quantum support, new hardware ports, significant assembly performance work, and a number of vulnerability fixes. Users are always recommended to stay up to date with wolfSSL releases. In this release the use cases affected by high severity reports are: trusted peer certificates (WOLFSSL_TRUST_PEER_CERT, including builds […]
Read MoreMore TagHigh-Entropy Random Numbers from Oscillator Jitter on C2000 C28x
The LAUNCHXL-F28P55X (TMS320F28P550SJ) features a 150 MHz C28x DSP from TI’s C2000 real-time control family. Designed for motor drives, solar inverters, EV chargers, and digital power supplies, it lacks a hardware TRNG. However, it provides three independent clock sources: two on-chip RC oscillators (INTOSC1 and INTOSC2) and the crystal driving the PLL. Using the chip’s […]
Read MoreMore TagBringing wolfSSL in line with RFC 9846
RFC 9846, published in July 2026, obsoletes RFC 8446 as the specification for TLS 1.3. It is a minor revision in that it is backward compatible, but it tightens a number of requirements that were previously advisory. At wolfSSL, we are working hard on implementing the specification. No KeyUpdate while sending early data. Section 5.5 […]
Read MoreMore TagwolfSSL at the Toradex Booth: Post-Quantum the SMARC iMX95 SoM
Heading to Embedded World North America (September 22–24)? Stop by Toradex at Booth 6222 to see wolfSSL’s live Post-Quantum Cryptography (PQC) demo on the Toradex SMARC iMX95 module. Afterward, visit the wolfSSL booth (#6027) to say hi and talk with our team. The Demo at a Glance We demonstrate post-quantum security across both halves of […]
Read MoreMore TagTop 10 Things to Reduce wolfSSL Code Size
wolfSSL is one of the smallest commercial TLS / crypto libraries available. Pulling the right configuration levers is the biggest challenge. This post is a short tour of the ten biggest knobs. Two ways to configure the build Every define and flag below can be supplied through either of these paths: Autoconf / configure(./configure): Pass […]
Read MoreMore TagwolfCrypt on the Silicon Labs EFR32xG25 Secure Element
wolfSSL now supports hardware-accelerated crypto on the Silicon Labs EFR32 Series 2 Secure Element using wolfCrypt crypto callbacks. Simply define WOLFSSL_SILABS_CRYPTOCB. wolfCrypt automatically registers the Secure Element at startup and routes supported operations to hardware, including: Symmetric Ciphers: AES (ECB, CBC, CTR, GCM, CCM), ChaCha20-Poly1305 MAC & KDF: AES-CMAC, HKDF, PBKDF2 Hashing: SHA-2 Asymmetric: ECDSA, […]
Read MoreMore TagTLS 1.3 in 30.8 KB: wolfSSL vs MbedTLS
wolfSSL’s new tinytls13 profile against a parity-matched MbedTLS, measured on Cortex-M33, x86_64, and aarch64. wolfSSL and MbedTLS both target small embedded TLS, but configured and built with parity options they are not the same size. The new tinytls13 profile is a TLS 1.3-only build that strips everything which is not TLS 1.3 and defaults to […]
Read MoreMore Tag