GitHub - wolfSSL/wolfCOSE: A fast, portable, and lightweight COSE + CBOR implementation for embed…

1 / 8

GitHub - wolfSSL/wolfCOSE: A fast, portable, and lightweight COSE + CBOR implementation for embedded systems. Supports PQC, FIPS 140-3, DO-178, and MISRA C. Powered by wolfSSL.

Hacker News·5 months ago

Reading 0:00

15s threshold

wolfCOSE is a lightweight C library implementing CBOR (RFC 8949) and COSE (RFC 9052/9053) using wolfSSL as the crypto backend.

Main Features

Complete RFC 9052 message set : all six COSE message types, including multi-signer COSE_Sign and multi-recipient COSE_Encrypt / COSE_Mac

Post-quantum signing : ML-DSA (Dilithium) at all three security levels

40 algorithms across signing, encryption, MAC, and key distribution

Zero dynamic allocation : all operations use caller-provided buffers

Tiny footprint : 7.5 KB .text minimal build (Sign1+ECC), 25.6 KB full (40 algorithms), zero .data / .bss

Full COSE lifecycle in ~<1KB RAM (excluding wolfCrypt internals)

Path to FIPS 140-3 via wolfCrypt FIPS Certificate #4718 (sole crypto dependency)

Supported Algorithms

Signing: ES256, ES384, ES512, EdDSA (Ed25519/Ed448), PS256/384/512, ML-DSA-44/65/87

Encryption: AES-GCM (128/192/256), ChaCha20-Poly1305, AES-CCM variants

MAC: HMAC-SHA256/384/512, AES-MAC

Key Distribution: Direct, AES Key Wrap, ECDH-ES+HKDF

COSE…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.