RECENT BLOG NEWS

So, what’s new at wolfSSL? Take a look below to check out the most recent news, or sign up to receive weekly email notifications containing the latest news from wolfSSL. wolfSSL also has a support-specific blog page dedicated to answering some of the more commonly received support questions.

Why is wolfSSL reporting so many CVEs?

Why are we reporting so many CVEs? If you follow wolfSSL, you’ve probably noticed the number of CVEs we file per release has ramped up this spring 2026. From 5.8.0 (April 2025) to 5.9.1 (April 2026) we’ve experienced nearly geometric growth in reported CVEs per wolfSSL release. So what’s going on? Should users of wolfSSL […]

Read MoreMore Tag

wolfCOSE vs The Field: The smallest and fastest COSE library, now with post-quantum ML-DSA at the same cost.

Scope: ES256 (P-256) COSE_Sign1 size and speed plus post-quantum ML-DSA (FIPS 204), wolfCOSE vs t_cose vs COSE-C, with cross-language and on-device results. Method: one identical operation, every library and crypto backend built from source on one machine with identical flags, dead-code eliminated. Desktop: x86_64 Intel i9-11950H, GCC 14.2. On-device: NUCLEO-H563ZI Cortex-M33 at 250 MHz. June […]

Read MoreMore Tag

Post-Quantum Cryptography in curl

wolfSSL continues to advance post-quantum cryptography support throughout its ecosystem, including curl when built with wolfSSL. Developers can use post-quantum and hybrid TLS 1.3 key exchange mechanisms, including ML-KEM, to help protect connections against future quantum threats. Supported Hybrid TLS 1.3 Key Exchange: SecP256r1MLKEM512 SecP384r1MLKEM768 SecP521r1MLKEM1024 SecP256r1MLKEM768 SecP521r1MLKEM1024 SecP384r1MLKEM1024 X25519MLKEM512 X25519MLKEM768 X448MLKEM768 To learn more […]

Read MoreMore Tag

wolfIP: Deterministic TCP/IP Without Dynamic Memory Allocation – APAC-Friendly Time

Many networking stacks make it difficult to predict memory usage, runtime behavior, and certification effort. For embedded, real-time, and safety-critical systems, that uncertainty can add complexity throughout development, testing, and deployment. Join us for a technical webinar on wolfIP, a compact TCP/IP stack designed specifically for deterministic embedded networking. wolfIP eliminates runtime memory allocation and […]

Read MoreMore Tag

wolfCOSE: The First COSE Implementation with ML-DSA – Production-Tested, CAVP-Validated Post-Quantum Signatures in wolfCOSE

If you are signing CBOR payloads on an embedded device and you have started worrying about “harvest now, decrypt later,” that worry now extends to signatures too. Long-lived firmware artifacts, attestation reports, supply-chain manifests: anything signed today with ECDSA or RSA can be retroactively forged by an adversary with a cryptographically relevant quantum computer. wolfCOSE […]

Read MoreMore Tag

wolfCOSE: What is COSE?

COSE (CBOR Object Signing and Encryption) is a compact binary format for attaching signatures, encryption, or MACs directly to a piece of data, so that the proof travels with the object no matter how it is stored, cached, or forwarded. That is the whole idea. If you know JOSE, JWT, JWS, JWE, COSE is the […]

Read MoreMore Tag

Posts navigation

1 2 3 4 … 240 241 242

Weekly updates

Archives