wolfSSL is proud to announce that active development has started to support offloading cryptographic operations to the ASU subsystem found on the Xilinx Versal Gen 2. We are currently implementing offload support for TRNG, SHA2, SHA3, SHAKE, HMAC, AES, RSA, and ECC. This will help enable future wolfSSL projects on the Versal Gen 2 platform, […]
Read MoreMore TagCategory: wolfSSL/ wolfCrypt
White House EO 14412
By now, anyone who tracks security protocols has heard ad nauseum about the White House Executive Order 14412 regarding post-quantum cryptography (PQC). In case you’ve been hiding under a rock, it can be found here. The TL;DR is that all High Value Assets (HVAs) must use PQC key establishment by 2030 and PQC digital signatures […]
Read MoreMore TagPreliminary MACsec Key Agreement (MKA) Support, Built for AUTOSAR
Secure in-vehicle and industrial Ethernet is moving from “nice to have” to “required,” and MACsec (IEEE 802.1AE) is at the center of it — providing line-rate Layer 2 encryption, integrity, and replay protection directly on the wire. But MACsec doesn’t key itself. It needs a control plane to discover peers, prove liveness, elect a Key […]
Read MoreMore TagwolfSSL 5.9.2 release blog
wolfSSL 5.9.2 has been released with a broad range of new features and enhancements around Post-Quantum Cryptography, crypto callback support, our Rust wrapper, and embedded hardware support. Similar to wolfSSL 5.9.1, a large number of CVEs are addressed in this release, along with general bug fixes. Additionally, there are some security hardening behavior changes we […]
Read MoreMore TagwolfSSL vs MbedTLS – An apples-to-apples benchmark across Intel, ARM (Cortex-A and Cortex-M), and RISC-V targets.
Scope: the full wolfCrypt algorithm suite vs MbedTLS, measured the same way on four platforms (Intel x86_64, a Raspberry Pi 5 (ARMv8-A Cortex-A76), a bare-metal STM32H563 Cortex-M33, and a Microchip PolarFire SoC RISC-V U54), plus the post-quantum and extended-algorithm coverage MbedTLS does not have. wolfSSL v5.9.1, MbedTLS 3.6.6, June 2026. Method: identical sources built from […]
Read MoreMore TagMaintaining FIPS Validation: Shifting from BitLocker to VeraCrypt with wolfCrypt
In September of 2026, the Cryptographic Module Validation Program (CMVP) will move all remaining FIPS 140-2 certificates to the Historical List, including the modules powering Windows BitLocker. For organizations navigating FIPS, CMMC, and FedRAMP, this is an immediate critical stop, as NIST guidance states federal agencies “should not include” Historical-status modules in new procurements, and […]
Read MoreMore TagwolfKeyMgr: Decrypt Internal TLS 1.3 Traffic Without Breaking It
TLS 1.3 made per-session forward secrecy the default. That is a win for privacy on the open internet, but inside your own data center it leaves monitoring, compliance, and intrusion-detection tools blind to the traffic they are meant to watch. wolfKeyMgr is wolfSSL’s answer. What wolfKeyMgr Does wolfKeyMgr is a secure key management service […]
Read MoreMore TagWhy is wolfSSL reporting so many CVEs?
Why are we reporting so many CVEs? If you follow wolfSSL, you’ve probably noticed the number of CVEs we file per release has ramped up this spring 2026. From 5.8.0 (April 2025) to 5.9.1 (April 2026) we’ve experienced nearly geometric growth in reported CVEs per wolfSSL release. So what’s going on? Should users of wolfSSL […]
Read MoreMore TagwolfSSL vs OpenSSL: Heap Usage Comparison
When choosing a TLS library, two questions come up again and again: how much memory does it use and how fast is it. This post focuses on memory, comparing the heap usage of wolfSSL against several OpenSSL releases for an identical TLS 1.2 handshake. All numbers below were regenerated with current releases; wolfSSL 5.9.1 versus […]
Read MoreMore TagNative HTTP Message Signatures in curl, Powered by wolfSSL – Part 3
In Part 1, we argued agents need cryptographic request authenticity. In Part 2 we surveyed the ecosystem and the adjacent tools. This post is about what we’re contributing: native RFC 9421 support at the plumbing layer — curl and libcurl, with wolfCrypt providing the Ed25519 math. Two open PRs: curl — curl/curl#21239 — httpsig: add […]
Read MoreMore Tag