wolfTrust is a trusted firmware platform for Arm Cortex-M, now under development at wolfSSL, that brings the full wolfSSL security stack into a single secure runtime. It implements the Arm Firmware Framework for M (FF-M) with source-compatible PSA client interfaces, so applications written for Trusted Firmware-M (TF-M) keep their psa_* calls and simply swap the trusted firmware underneath.
Under the hood, wolfBoot handles secure boot, wolfCrypt and wolfPSA power the PSA Crypto API, wolfHSM protects keys and storage, and wolfCOSE signs attestation tokens. Zephyr, FreeRTOS, and bare-metal applications connect as Non-secure clients without changes.
Why wolfTrust
- Faster cryptography with architecture specific assembly optimizations
- Path to FIPS 140-3 (wolfCrypt certs #4718, #5041)
- Post-quantum ability ML-KEM, ML-DSA, SLH-DSA, LMS, XMSS
- wolfHSM key isolation, with a path to dedicated HSM cores
- Designed for max portability and architecture-neutral design
- Zero dynamic allocation options
- Single vendor stack and 24×7 support
Beyond TF-M
wolfTrust starts with the Cortex-M role served today by TF-M. Planned work extends it to AArch64 and to the roles commonly supplied by Trusted Firmware-A (TF-A), keeping the same manifest, service, IPC, and PSA contracts. The result is one wolfSSL trust architecture from microcontrollers to application processors.
Get Started
We are currently welcoming early evaluations. If you have any questions about the above architecture, or if you would like to get started on integrating wolfTrust into your own embedded environment, please contact us at facts@wolfssl.com, or call us at +1 425 245 8247.
Download wolfSSL Now