wolfHSM by wolfSSL offers a portable, open-source interface for hardware cryptography, non-volatile memory, and secure processing, enhancing security and performance for ECUs. It integrates the wolfCrypt software crypto engine on hardware HSMs like Infineon Aurix Tricore TC3XX, supporting Chinese government algorithms SM2, SM3, and SM4. Post Quantum Cryptography algorithms like Kyber, LMS, and XMSS are available for automotive users to meet customer requirements. When hardware cryptographic processing is available on the HSM, it is utilized to enhance performance. wolfHSM operates wherever wolfSSL is supported. It features extensibility of cryptographic algorithms, consistency with security functions, integration with AUTOSAR and SHE+, direct usage of HSM from wolfCrypt’s externalized APIs, PKCS11 interface availability, and TPM 2. Secure OnBoard Communication (SecOC) module integration is available. Certificate handling, symmetric and asymmetric keys, and cryptography are supported. Customization options are available. FIPS 140-3 is available.
