wolfSSL Advances Embedded Security with wolfIP, New Post-Quantum Capabilities, and AURIX TC4xx Support

September 22, 2026

News

wolfSSL Inc. announced new capabilities spanning deterministic networking, expanded post-quantum cryptography, and hardware-isolated cryptographic services. The announcement includes wolfIP, a deterministic TCP/IP stack with no dynamic memory allocation; NIST-validated post-quantum algorithms and native Falcon and FrodoKEM implementations in wolfCrypt; and wolfHSM support for the Infineon AURIX TC4xx.

wolfIP is a lightweight TCP/IP stack for bare-metal and RTOS-based embedded systems. It uses no dynamic memory allocation. Socket tables and RX/TX packet buffers are sized at build time, creating a fixed memory model that developers can analyze before deployment. This defined resource usage is designed to support predictable operation and simplify verification.

wolfIP's endpoint-focused TCP/IP core is approximately four times smaller than lwIP and includes TCP, UDP, DHCP, and DNS. Direct integration with wolfSSL TLS 1.3 secures TCP connections without introducing a separate network architecture. For resource-constrained and safety-critical systems, these defined limits can reduce verification complexity and support certification efforts.

wolfCrypt Post-Quantum has received validation through the NIST Cryptographic Algorithm Validation Program under certificate #A8437. The validation covers implementations of ML-KEM, ML-DSA, and SLH-DSA, along with LMS and XMSS signature verification.