wolfSSL announced seven new developments advancing post-quantum cryptography and FIPS 140-3 across embedded devices, Linux, secure networking, virtualization, and satellite systems. The new technologies help organizations adopt post-quantum algorithms and validated cryptography while continuing to use their existing platforms.
Edmonds, Washington, August 4, 2026 /PRNewswire-PRWeb/ —
wolfSSL Inc., a recognized leader in cryptography, today announced seven new developments extending post-quantum cryptography and FIPS 140-3. Top-notch new PQC support for embedded devices, Linux infrastructure, secure networking, virtualization, and satellite hardware is now available.
The new developments include PQC-enabled FIPS, high-performance, low-footprint FrodoKEM support, Linux kernel integration, PQC- and FIPS-enabled WireGuard and Tailscale, FIPS for Proxmox VE, a PQC firmware TPM, and a satellite cryptographic module for FIPS 140-3 Level 3 validation.
Post-Quantum FIPS 140-3
wolfSSL’s new wolfCrypt FIPS 140-3 module includes ML-KEM, ML-DSA, and SLH-DSA, the post-quantum algorithms standardized in NIST FIPS 203–205. PQC-enabled configurations are now available for customer integration and evaluation. Customers can request specific Operating Environments today! wolfSSL is now providing the world’s first and fastest path to post-quantum cryptography for regulated environments.
“Cryptographic requirements will continue to change long after today’s products are deployed,” said Todd Ouska, CTO of wolfSSL. “By integrating post-quantum algorithms into our FIPS foundation and extending that technology from embedded devices to Linux and network infrastructure, we are giving customers a practical path to adopt new standards without replacing their existing platforms. The definitive high-performance PQC solution is now available.”
High Performance FrodoKEM in wolfCrypt
wolfSSL’s FrodoKEM implementation expands the post-quantum options available through wolfCrypt across embedded, RTOS, Linux, and enterprise environments. The implementation will include ASN.1 key handling and X.509 certificate support to simplify integration into existing cryptographic and certificate-based systems. It will be fully integrated into wolfSSL, wolfSSH, and our other products.
Post-Quantum Cryptography in the Linux Kernel
wolfCrypt is no stranger to the Linux kernel and now includes support for PQC in the kernel. wolfSSL’s most recent efforts include integration of wolfCrypt PQC algorithms with the Linux Kernel Crypto API and add post-quantum verification for kernel modules. This makes wolfCrypt’s post-quantum capabilities available to kernel-space components as well as user-space applications, extending PQC protection deeper into the Linux software stack.
FIPS 140-3 with Post-Quantum for WireGuard and Tailscale
wolfSSL is bringing FIPS 140-3 validated cryptography to WireGuard and Tailscale workflows through wolfGuard and wolfScale.
wolfGuard provides a WireGuard-based VPN implementation using FIPS-approved algorithms backed by wolfCrypt while supporting Linux kernel and both Go and Rust user-space deployments. Building on wolfGuard, wolfScale extends this protection across Tailscale and Headscale mesh networks, including node-to-node tunnels, control-plane communications, DERP relays, and certificate provisioning. Users retain familiar Tailscale CLI workflows while supporting deployments subject to FIPS 140-3, FedRAMP, CJIS, and CNSA 2.0 requirements.
Path to FIPS 140-3 and Post Quantum Encryption for Proxmox VE
An expansion of wolfSSL’s Full Linux FIPS solution brings wolfCrypt FIPS 140-3-validated cryptography to Proxmox VE and its Debian-based software stack.
The integration replaces cryptographic backends including OpenSSL, GnuTLS, NSS, libgcrypt, and the Linux kernel. This allows supported Proxmox services to use validated cryptography with minimal or no application-level changes, helping government and regulated organizations address FIPS 140-3 requirements while continuing to use their existing Proxmox infrastructure, all at a fraction of the cost of competing virtualization products.
Firmware TPM for Embedded Systems with Post Quantum Support
The latest wolfSSL firmware TPM release adds support for TPM 2.0 v1.85, including ML-KEM and ML-DSA. An STM32H5 reference port demonstrates the firmware TPM on an Arm Cortex-M33 platform.
Built on wolfCrypt, the firmware TPM provides TPM 2.0 capabilities within an embedded system’s existing processor, eliminating the need for a separate TPM chip. It protects keys and supports attestation and persistent storage within isolated execution environments such as Arm TrustZone or on an FPGA.
FIPS 140-3 Level 3 for Satellite Systems
wolfSSL is in process on a Satellite Crypto Module targeting FIPS 140-3 Level 3 validation. Listed by NIST as an Implementation Under Test on July 6, 2026, the module extends wolfSSL’s FIPS technology into satellite communications hardware requiring stronger physical protection for cryptographic keys and operations.
The project marks wolfSSL’s first FIPS 140-3 Level 3 effort, expanding beyond its existing Level 1 software module validations to support high-assurance satellite systems.
To evaluate these technologies or discuss adding post-quantum cryptography and FIPS 140-3 validated security to an existing platform, visit www.wolfssl.com/products/ or contact facts@wolfssl.com to set a time to meet with us at Black Hat.
If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now