Loading article…
wolfSSL has launched wolfCOSE, a lightweight, C-based library for COSE and CBOR, featuring post-quantum algorithm support and MISRA C compliance for IoT.
wolfSSL has introduced wolfCOSE, a new embedded library designed to provide structured cryptographic messaging for resource-constrained hardware [2]. Built on the wolfCrypt engine, the library implements both the CBOR serialization format and COSE standards, offering a footprint as small as 7.5 KB [2].
Key takeaways
wolfCOSE is designed to address the challenges of implementing secure messaging in environments where traditional protocols like TLS are too resource-intensive [2]. By implementing all six message types defined in RFC 9052—including Sign1, Sign, Encrypt0, Encrypt, Mac0, and Mac—the library supports complex scenarios such as multi-signer firmware distribution [2]. Because the library avoids dynamic memory allocation, all operations rely on caller-provided buffers, which is a common requirement for devices governed by standards like IEC 61508 or ISO 26262 [2].
The library’s algorithm suite is extensive, covering ECDSA, EdDSA, RSA-PSS, and various AES-based encryption and MAC methods [2]. A notable feature is the integration of ML-DSA (formerly CRYSTALS-Dilithium), which allows developers to implement post-quantum signing on devices with long operational lifespans [2]. To utilize these post-quantum features, users must employ wolfSSL version 5.8.0 or newer, which includes the necessary context-aware APIs [2].
Although wolfSSL currently classifies wolfCOSE as a project in progress rather than an officially supported product, the library has undergone rigorous testing [2]. The development process includes continuous integration across multiple compilers and platforms, with code coverage reaching 99.3% for core components [2]. Static analysis is performed using tools such as Coverity Scan, Clang analyzer, and cppcheck to enforce strict adherence to MISRA C guidelines [2].
As IoT devices increasingly require secure, verifiable firmware updates and remote attestation, COSE has emerged as a standard for constrained environments [2]. By providing a production-grade C implementation that avoids heap allocation, wolfSSL aims to fill a gap for developers working in regulated industries like automotive and healthcare [2]. While the library is currently available under a GPLv3 license, wolfSSL intends to transition it to full supported status as market demand for embedded post-quantum security grows [2].
Coverage is mostly measured — 214 of 255 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 2 outlets · Jun 2, 2026 · How we report
Sec is a trending topic in the news. Recent coverage of Sec includes: BREAKING: FSU beats out pair of SEC teams to earn commit from DL Eric Vaulx Jr.
10 news sources analyzed
Based on our analysis of recent news articles, Sec has mixed coverage. Check the sentiment score above for detailed analysis.
TrendWatcher aggregates Sec news from 100+ trusted sources and provides AI-powered sentiment analysis updated in real-time.