DigiCert releases new open source, TrustCore SDK
Eve Goode
Share this content
DigiCert has announced the open-source release of its TrustCore SDK, a production-proven cryptographic library for embedded and IoT devices.
The company highlights that it is now available under the AGPL v3 license on GitHub, TrustCore SDK gives developers the tools to design security into their products from the start by enabling them to evaluate, integrate and customise trusted cryptographic capabilities with full transparency.
Quantum resilient solutions
By offering both an open-source option and a commercially-supported path, DigiCert says that it is helping organisations build quantum-resilient solutions that scale securely for production deployments.
The release addresses a growing need for verifiable, high-assurance cryptography as embedded and connected devices face new threats.
Digicert highlights that traditional cryptography libraries are often:
- Opaque
- Difficult to validate
- Slow to adapt to evolving standards like post-quantum readiness
TrustCore SDK changes that by placing open, production-tested cryptography into developers’ hands.
The company explains that this will enable faster innovation, improved transparency and community-driven integration of emerging standards like TLS 1.3 and PQC algorithms.
“Transparent and future-ready”
Deepika Chauhan, Chief Product Officer, DigiCert commented: “As we approach a post-quantum era, the ability to build trust into the core of connected systems has become an imperative for achieving resilience.
“By open sourcing TrustCore SDK, we’re moving the industry toward a more transparent and future-ready foundation where security is not just a technical feature but a strategic enabler of innovation, reliability and intelligent trust,” Chauhan concluded.
TrustCore SDK
The company says that TrustCore SDK offers support for TLS 1.3, MQTT, SCEP, EST and post-quantum cryptographic algorithms, and stands apart from other open-source crypto libraries by offering:
- A 15+ year production track record across high-assurance industries
- FIPS-compliant configurations for rigorous security use cases
- Direct integration with DigiCert Device Trust Manager, enabling certificate lifecycle automation
- Modular availability, starting with the NanoSSH module on GitHub, with more components releasing over the coming months
