wolfSSL Embedded SSL/TLS; FIPS 140-3

wolfSSL Embedded SSL/TLS; FIPS 140-3

@wolfssl.com

The most popular open source, embedded TLS. Active in #IoTSecurity, #Avionics, #Automotive & more. Over 5B connections secured! #TLS13 #SecureYourConnectivity

131 followers17 following1.2K posts

wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

From QMA architecture to validation: see how wolfCrypt and wolfTPM support EigenQ’s post-quantum integration path. Join wolfSSL and EigenQ for a technical walkthrough covering ML-DSA, ML-KEM, and TPM 2.0 v1.85 post-quantum algorithm support. 🗓️ Oct 28 | 9 AM PT

wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Save your spot: us02web.zoom.us/webi... #PQC #TPM #Cybersecurity

us02web.zoom.usWelcome! You are invited to join a webinar: Post-Quantum Integration with wolfTPM and EigenQ. After registering, you will receive a confirmation email about joining the webinar.Post-quantum TPM support is only useful when your application can access it. Integrating it means understanding the system architecture. Join wolfSSL and EigenQ for a technical walkthrough of wolfCrypt in EigenQ’s QMA hardware acceleration module, which provides photon-based quantum entropy and random number generation. Follow the integration from QMA architecture to validation via wolfTPM’s TPM 2.0 v1.85 post-quantum algorithms. This webinar will cover: • QMA architecture and wolfCrypt’s role within it • wolfCrypt APIs for ML-DSA and ML-KEM support • EigenQ demonstration showing how wolfCrypt works within QMA • EigenQ's use of wolfTPM in their validation path Date: October 28 | 9:00 AM PT Duration: 60 minutes Register now to see the integration in practice and bring your questions to the experts. As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or +1 425 245 8247.
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

🔐 Moving OpenSSL cryptography to wolfSSL? Choose the integration that fits your version. wolfEngine supports OpenSSL 1.x. wolfProvider supports OpenSSL 3.x/4.x and enables post-quantum algorithms like ML-KEM and ML-DSA. Learn more: www.wolfssl.com/wolf... #OpenSSL #PQC #FIPS #MLKEM #MLDSA

wolfssl.comwolfEngine vs wolfProvider - wolfSSLAt wolfSSL we provide two main services to help with the transition away from OpenSSL crypto operations, wolfEngine and wolfProvider. These both provide a
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

SAMBA is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itSAMBA is now FIPS 140-3 Tested & Available with wolfCrypt FIPSSamba is an open source implementation of the SMB networking protocol used for file and print sharing, authentication, and interoperability between Linux, Unix, and Windows systems. FIPS 140-3 support is available for Samba with wolfCrypt FIPS, tested for use with Samba environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Vulnerability Disclosure: wolfSSH (CVE-2026-16516)

dlvr.itVulnerability Disclosure: wolfSSH (CVE-2026-16516)Date: October 6, 2026 Severity: Critical Affected Users: Applications using the wolfSSH client with wolfSSH releases through v1.5.0 that rely on ECDSA host keys. Fixed In: wolfSSH v1.6.0 (PR 1022, issue #1012) Summary A man-in-the-middle could substitute a server’s ECDSA host key with a key on a different curve and still pass signature verification, using […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

SSH Extended Key Usage and OID Collision Mitigation in wolfSSL 5.9.4

dlvr.itSSH Extended Key Usage and OID Collision Mitigation in wolfSSL 5.9.4With the release of wolfSSL 5.9.4, Extended Key Usage (EKU) support for SSH X509 certificates was added. Under RFC 6187, two SSH key purposes are specified: id-kp-secureShellClient (1.3.6.1.5.5.7.3.21) and id-kp-secureShellServer (1.3.6.1.5.5.7.3.22). Previously the default ASN.1 template parser omitted SSH purposes and neither parser recognized the server purpose; both are now fully parsed. Builds configured with […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Still using DTLS 1.2? Upgrade to DTLS 1.3 for faster connections and post-quantum security. 🔐 With wolfSSL, DTLS 1.3 can complete handshakes up to 20× faster when datagrams are lost and supports ML-KEM, ML-DSA, and SLH-DSA. Learn more: www.wolfssl.com/dtls... #DTLS #PQC #PostQuantum

wolfssl.comDTLS 1.3 vs DTLS 1.2: Why It's Time to UpgradeDTLS 1.3, standardized as RFC 9147, is a major leap over DTLS 1.2 for any application securing UDP traffic. It inherits every improvement of TLS 1.3, first among them the only path to post-quantum cryptography, one DTLS 1.2 will never have, and adds datagram-specific advances of its own that make co
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

LIVE WEBINAR: Post-Quantum Integration with wolfTPM and EigenQ

dlvr.itLIVE WEBINAR: Post-Quantum Integration with wolfTPM and EigenQPost-quantum TPM support is only useful when your application can access it. Integrating it means understanding the system architecture. Join wolfSSL and EigenQ for a technical walkthrough of wolfCrypt in EigenQ’s QMA hardware acceleration module, which provides photon-based quantum entropy and random number generation. Follow the integration from QMA architecture to validation via wolfTPM’s TPM […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Building a FIPS 140-3 architecture on Yocto Linux takes more than integration. You also need to generate the required configuration, run module self-tests, and verify cryptographic operations. Join our webinar to get the practical details! Save the date: Oct 27 at 9 AM PT.

wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Register now: us02web.zoom.us/webi... #FIPS #LinuxFIPS #LinuxYocto The Yocto Project

us02web.zoom.usWelcome! You are invited to join a webinar: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux. After registering, you will receive a confirmation email about joining the webinar.Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. This webinar shows how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You'll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk through the practical integration and verification process. This webinar covers • Building a unified FIPS 140-3 architecture on embedded Linux • Replacing OpenSSL, NSS, GnuTLS, libgcrypt, and kernel cryptography • Integrating wolfCrypt FIPS into Yocto and Poky • Generating FIPS configuration and verifying the module • Current FIPS certificates and upcoming PQC support Date: October 27 | 9:00 AM PT Duration: 60 minutes Register now to learn how to integrate wolfCrypt FIPS into Yocto Linux and verify a unified FIPS 140-3 implementation. As always, our webinar will includeQ&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

LIVE WEBINAR: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux

dlvr.itLIVE WEBINAR: Full-Linux FIPS 140-3 via wolfCrypt on Yocto LinuxAchieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries. Join us to learn how to build a unified FIPS 140-3 architecture on Yocto Linux using wolfCrypt FIPS. You’ll see how to replace or override OpenSSL, NSS, GnuTLS, libgcrypt, and Linux kernel cryptography, then walk […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Meet us at the MilSat Symposium, Booth 33, to explore wolfSSL’s security solutions for space applications! Watch now: youtu.be/yHUSlk16LyI... #SecureBoot #PQC #vorago #VA41630 #SVSW #SVSW2026

youtu.beFortifying Mission-Critical Systems: Where Cybersecurity Meets Radiation ProtectionSecure boot in space isn't just about signing firmware. It has to survive radiation faults, long-mission lifecycles and limited update windows. @voragotechnologies and wolfSSL will present a technical session on implementing secure boot in real satellite environments. In orbit, your hardware and so
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Want wolfCrypt powering crypto across your Zephyr applications? 🔐 wolfPSA brings Zephyr support for the PSA Crypto API, with FIPS 140-3 options, post-quantum algorithms, and hardware acceleration—all without linking mbedTLS code. Learn more:

wolfssl.comwolfPSA: Replacing Zephyr's Mbed TLS PSA Crypto Provider - wolfSSLLast month we announced wolfSSL as a TLS provider for Zephyr's secure sockets layer. That work covered the networking side of the stack. Today we are
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

rsyslog / librelp is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itrsyslog / librelp is now FIPS 140-3 Tested & Available with wolfCrypt FIPSrsyslog / librelp provides system logging and reliable log transport capabilities for Linux and other Unix-like environments. FIPS 140-3 support is available for rsyslog / librelp with wolfCrypt FIPS, tested for use with rsyslog and librelp environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure system logging and […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Retrofitting Older Platforms for the CRA with a Software SRAM PUF

dlvr.itRetrofitting Older Platforms for the CRA with a Software SRAM PUFUpgrading legacy hardware to meet modern security standards doesn’t have to mean costly recalls or hardware redesigns. The wolfCrypt SRAM PUF derives a device-unique cryptographic key directly from the power-on state of a chip’s built-in SRAM. This provides a true hardware-rooted secret (100% in firmware) without adding a separate secure element. It is a practical, […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

rsync is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itrsync is now FIPS 140-3 Tested & Available with wolfCrypt FIPSrsync is an open source utility for efficiently transferring and synchronizing files between local and remote systems. FIPS 140-3 support is available for rsync with wolfCrypt FIPS, tested for use with rsync environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure file synchronization, transfer, and backup infrastructure while […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Join wolfSSL at FIPS ‘n’ Chips 2026, October 26-27 in Austin, Texas!

dlvr.itJoin wolfSSL at FIPS ‘n’ Chips 2026, October 26-27 in Austin, Texas!FIPS ‘n’ Chips isn’t a typical trade show. It’s where the people who run the FIPS program, CMVP staff, testing labs, and module vendors, meet to talk about the future of validation. This year, much of that conversation turns to AI: how large language models might change the way modules are reviewed, tested, and validated, […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Keep private keys inside the silicon. 🔐 wolfCrypt now supports bare-metal STM32 hardware crypto with no STM32 HAL dependency. DHUK and CCB enable device-bound keys that are derived and used in hardware—never exposed to software. Learn more:

wolfssl.comBare-Metal STM32 Hardware Crypto with wolfCrypt: DHUK and CCB Device-Bound Keys - wolfSSLwolfCrypt now drives STM32 on-chip crypto hardware directly from the registers, with zero STMicroelectronics HAL dependency (wolfSSL PR #10395). On top of the
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Bring post-quantum signatures to more platforms with fewer dependencies. 🔐 wolfCrypt now includes native Falcon-512 and Falcon-1024, eliminating the liboqs dependency and enabling embedded, Linux kernel, hardware-offload, and verify-only configurations. Learn more:

wolfssl.comwolfCrypt Now Supports Native Falcon anticipating FN-DSA Standardization - wolfSSLwolfCrypt now includes a native implementation of Falcon-512 and Falcon-1024, the lattice-based post-quantum signature algorithm selected by NIST for upcoming
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

RPM / DNF is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itRPM / DNF is now FIPS 140-3 Tested & Available with wolfCrypt FIPSRPM / DNF provides package management tools for installing, updating, verifying, and managing software on RPM-based Linux systems. FIPS 140-3 support is available for RPM / DNF with wolfCrypt FIPS, tested for use with RPM and DNF environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure Linux package […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Announcing wolfTPM Rust Support with the wolftpm 1.0.0 Crate

dlvr.itAnnouncing wolfTPM Rust Support with the wolftpm 1.0.0 CrateWe are excited to announce version 1.0.0 of wolftpm, the official Rust crate for wolfTPM, available on crates.io. wolfTPM is our highly portable TPM 2.0 library designed for embedded use. The new crate gives Rust developers a safe, idiomatic interface to it. TPM handles, sessions, and secrets are cleaned up automatically through RAII, key lifetimes […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Qt5 Network is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itQt5 Network is now FIPS 140-3 Tested & Available with wolfCrypt FIPSQt5 Network provides networking APIs for Qt applications, including TCP/IP communications, HTTP, and secure network connections. FIPS 140-3 support is available for Qt5 Network with wolfCrypt FIPS, tested for use with Qt5 Network environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure network communications within Qt applications while […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

LIVE WEBINAR: Everything wolfSSL Supports for AMD/Xilinx

dlvr.itLIVE WEBINAR: Everything wolfSSL Supports for AMD/XilinxAdding secure boot and cryptography to an AMD/Xilinx design means working through boot image authentication, key management, hardware acceleration, and Linux integration. Join wolfSSL for a technical walkthrough of its AMD/Xilinx support. Learn which components apply to your target and what’s involved in integrating them. What you’ll learn: wolfSSL builds, hardware acceleration, and PetaLinux integration […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

wolfCrypt adds FrodoKEM! 🔐 Looking for a post-quantum key encapsulation mechanism based on unstructured lattices? wolfSSL now supports all 12 FrodoKEM and eFrodoKEM variants, with hardware acceleration and flexible build options. Learn more:

wolfssl.comwolfSSL Adds FrodoKEM Post-Quantum Key Encapsulation - wolfSSLwolfSSL is pleased to announce support for FrodoKEM in wolfCrypt. FrodoKEM joins ML-KEM (FIPS 203), ML-DSA (FIPS 204), LMS/HSS and XMSS/XMSS^MT in our growing
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Tuning wolfSSL for Cortex-M: Build Options for Speed and Code Size

dlvr.itTuning wolfSSL for Cortex-M: Build Options for Speed and Code SizeA wolfSSL build for Cortex-M defaults to the smallest public key math, which is also the slowest. Three configuration changes made a full TLS 1.3 handshake ten times faster, from 2800 ms down to 262 ms, and left the image smaller at the same time. Every figure below was measured on a NUCLEO-U385RG-Q (STM32U385, Cortex-M33). […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

What if your FPGA could host its own post-quantum TPM 2.0—without a discrete TPM chip? Explore wolfTPM v1.85 on Microchip PolarFire, with native ML-DSA and ML-KEM support and benchmark results on a bare-metal RISC-V soft core. 🔗 Learn more: www.wolfssl.com/wolf... #PQC #FPGA #wolfSSL

wolfssl.comwolfTPM Firmware TPM: Post-Quantum TPM 2.0 (v1.85) on an FPGA Soft-CoreAerospace, defense, industrial, medical, and energy platforms need a hardware Root of Trust, yet a discrete TPM chip is one more component to procure, qualify, and fit on a board that may run for decades. What if the TPM were simply part of the FPGA you already built? This example runs wolfTPM's
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

LIVE WEBINAR: PQC for Embedded Wi-Fi with wolfCrypt and ClarinoxWiFi

dlvr.itLIVE WEBINAR: PQC for Embedded Wi-Fi with wolfCrypt and ClarinoxWiFiHow do you move from selecting post-quantum algorithms to using them in an embedded Wi-Fi application? The API calls, key establishment, digital signatures, and measured performance all need to make sense for your design. Join wolfSSL and Clarinox for a walkthrough of wolfCrypt’s ML-KEM and ML-DSA in ClarinoxWiFi. See how the algorithms are used, examine […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

LIVE WEBINAR: Automotive HSM Integration on RH850 with wolfHSM and wolfBoot

dlvr.itLIVE WEBINAR: Automotive HSM Integration on RH850 with wolfHSM and wolfBootProtecting keys is one part of securing an automotive ECU. You also need to connect application cryptographic requests to the HSM and authenticate firmware before it runs. Join wolfSSL for an implementation walkthrough of wolfHSM and wolfBoot on Renesas RH850. Learn what porting and secure boot integration involve, then see a demonstration and performance benchmarks. […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

How practical is post-quantum cryptography on embedded hardware? 🔐 See wolfCrypt PQC in action on the NXP FRDM-MCXN947, with hybrid ECC + ML-KEM 512, TLS 1.3 integration, and performance benchmarks. 🎥 Watch the video: youtu.be/skUKvj1O0os... #PQC #EmbeddedSecurity #wolfSSL #NXP

youtu.bePost-Quantum TLS 1.3 with wolfSSL on NXP FRDM-MCXN947Secure the Future of Embedded Connectivity. Listen now to our partner webinar with NXP and wolfSSL to explore how to defend connected devices from the emerging threat of quantum computing. See how to deploy post-quantum cryptography (PQC) with wolfSSL on the NXP FRDM-MCXN947 platform — and see a li
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

Managing certificates on embedded devices? Watch our wolfCert webinar to explore lightweight certificate enrollment and lifecycle management with EST and SCEP, support for ML-DSA, and integration with hardware-backed keys. 🎥 Watch now: youtu.be/ut9TSy4pQ8g... #EmbeddedSecurity #PKI #PQC

youtu.beIntroduction to wolfCert: Certificate Enrollment for Embedded DevicesDevice certificates need renewal. Keys need rollover. Across an embedded fleet, both must work within tight memory and processing limits. Watch now for an introduction to wolfCert, the successor to wolfSCEP. Learn how to integrate certificate enrollment into MCU and RTOS applications within your de
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

python3-ntp is now FIPS 140-3 Tested & Available with wolfCrypt FIPS

dlvr.itpython3-ntp is now FIPS 140-3 Tested & Available with wolfCrypt FIPSpython3-ntp provides Python support for interacting with Network Time Protocol (NTP) services and network time synchronization. FIPS 140-3 support is available for python3-ntp with wolfCrypt FIPS, tested for use with python3-ntp environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations support secure time synchronization and network infrastructure while meeting […]
wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

PostgreSQL is being lab validated with wolfProvider to verify operation with wolfCrypt FIPS 140-3. Once validation is complete, PostgreSQL will be able to use FIPS 140-3 validated cryptography through wolfProvider without changes to PostgreSQL itself. Stay tuned for more technical details.

wolfSSL Embedded SSL/TLS; FIPS 140-3
@wolfssl.com

wolfSSL Featured in Anthropic’s New Open-Source Security Initiative

dlvr.itwolfSSL Featured in Anthropic’s New Open-Source Security InitiativewolfSSL was featured in Anthropic’s announcement of OSS Scanner, a new AI-powered vulnerability detection service designed to strengthen open-source software security. Todd Ouska of wolfSSL commented on the quality of the findings: “We found the signal from these reports high: of the 74 reports we received, all but two were valid, and five became CVEs. […]