wolfSSL now supports the SEC security engine on NXP’s QorIQ PowerPC T-series processors. SEC is the QorIQ name for the same CAAM block that wolfSSL has long supported on i.MX, and both are covered here: a new bare-metal port for the T-series, and a Linux user space backend for the existing CAAM driver. AES, AES-GCM, […]
Read MoreMore TagCategory: wolfSSL/ wolfCrypt
Symmetric vs Asymmetric Cryptography
When it comes to the basics of cryptographic algorithms, one of the most fundamental distinctions is whether an algorithm is symmetric or asymmetric. Symmetric cryptography uses a single shared key for both encryption and decryption for example, AES. The operations are simple, and this makes symmetric algorithms fast and cheap, which is why it’s the […]
Read MoreMore TagDTLS 1.3 vs DTLS 1.2: Why It’s Time to Upgrade
DTLS 1.3, standardized as RFC 9147, is a major leap over DTLS 1.2 for any application securing UDP traffic. It inherits every improvement of TLS 1.3, first among them the only path to post-quantum cryptography, one DTLS 1.2 will never have, and adds datagram-specific advances of its own that make communication safer, faster, more reliable, […]
Read MoreMore TagBare-Metal STM32 Hardware Crypto with wolfCrypt: DHUK and CCB Device-Bound Keys
wolfCrypt now drives STM32 on-chip crypto hardware directly from the registers, with zero STMicroelectronics HAL dependency (wolfSSL PR #10395). On top of the bare drivers, the port adds DHUK and CCB: chip-bound keys that are derived and used entirely inside the silicon and never appear in software. It is validated across ~27 NUCLEO boards spanning […]
Read MoreMore TagwolfSSL is bringing hardware key isolation to the Altera Agilex 5 SoC FPGA
wolfSSL is adding native support for the Secure Device Manager (SDM) hardened crypto services on Altera Agilex 5 devices. The new port connects wolfCrypt directly to the FPGA Crypto Services (FCS) stack, so keys can live where Linux cannot reach them: inside the SDM itself. Applications get that isolation through the same wolfSSL APIs they […]
Read MoreMore TagwolfSSL Now Supports the SealSQ VaultIC408 Secure Element
SealSQ, a WISeKey company, designs secure semiconductors and hardware security products – including the VaultIC secure element family and post-quantum devices – with a focus on post-quantum-ready security. wolfSSL now includes an in-tree port for the SealSQ VaultIC408 secure element. It offloads TLS ECC P-256 sign, verify, key generation, and ECDH to the chip through […]
Read MoreMore TagS32K388/389 AES Hardware Accelerator Support coming to wolfSSL
wolfSSL is currently working on porting the use of the S32K388 and S32K389 dedicated AES Accelerator available in the NXP HSE Hardware. wolfSSL currently has support for the HSE found on the S32K3 family, If you have questions about the current status of the HSE AES Accelerator port, or have specific algorithms, features, or projects […]
Read MoreMore TagWhite Paper: Security Technology Trends in Industrial Automation Equipment
We are pleased to announce the publication of a white paper jointly developed by Renesas and wolfSSL. Security Technology Trends in Industrial Automation Equipment Secure industrial automation equipment for evolving cybersecurity demands with lifecycle-based design, regulatory readiness, secure boot, OTA updates, key management, PQC migration, and Renesas RA/RX/RZ hardware security with wolfSSL/wolfBoot stacks—use this guide […]
Read MoreMore TagwolfSSL Advances Functional Safety with ISO 26262 Documentation and ASIL-D Certification Roadmap
As automotive software continues to grow in complexity, functional safety has become just as important as cybersecurity. To help customers build safety-critical systems, wolfSSL now offers ISO 26262 documentation designed to simplify the integration of wolfSSL into products pursuing Automotive Safety Integrity Level (ASIL) certification. This documentation provides developers with the supporting materials needed to […]
Read MoreMore TagwolfCrypt Now Supports SRAM PUF for Device-Unique Keys
The problem Almost every connected device holds a secret key to sign firmware, authenticate a TLS session, or encrypt stored data. Keeping that key out of an attacker’s hands is the hard part, and it is not just a small-device problem. Store it in on-chip or external flash and anyone with JTAG, an exposed debug […]
Read MoreMore Tag