Red Carpet Subscription Vol. 3 2026

The latest update to our signature Red Carpet Subscription is now available! This update brings the full release of version 2026, with post-quantum cryptography across the product line and new Go and Rust editions. It also introduces IPWorks LLM for building LLM-powered applications, GATT server support in IPWorks BLE, Zstandard and LZ4 compression in IPWorks Zip, SCIM provisioning in Cloud SSO, and more:

Version 2026 Now Available

We are pleased to announce the full release of version 2026. The latest version includes new components and across-the-board enhancements for every toolkit. Please visit our download center to get the latest version, or learn more about the 2026 release.

Post-Quantum Cryptography

Version 2026 brings Post-Quantum Cryptography (PQC) support across all toolkits. All TLS-enabled components now support ML-KEM for TLS 1.3. In addition, SSH-enabled components have been updated to support ML-KEM key exchange algorithms.

IPWorks PGP fully supports ML-DSA keys and ML-KEM algorithms. IPWorks Encrypt includes new MLDSA and MLKEM components for direct access to PQC functionality. For more details, please see this article detailing Post-Quantum Cryptography Support.

Go and Rust Editions

Go and Rust editions are now available for most of our products. Developers building in these languages can now use our components through native APIs, without third-party wrappers.

Security Defaults and Performance

Every toolkit has been updated with stronger security defaults and performance improvements. Changes include AES-256 as the default AS2 encryption algorithm, PKCS#1 disallowed by default in FIPS mode, and older, weaker TLS and SSH mechanisms switched off in SecureBlackbox.

SecureBlackbox Updates

SecureBlackbox 2026 brings full post-quantum support across the board: transport components now support ML-KEM key exchange, including hybrid variants based on NIST and Edwards curves, and ML-DSA signatures are integrated throughout the PKI and AdES stack.

Digital signature support also gains Trusted Lists v6 (the European standard), Delta CRLs for broader PKI coverage and faster chain validation, and the CSC v2 protocol for smoother third-party interoperability.

Transport components add OpenSSH certificate support for trust-based client and server authentication, plus HTTP Server-Sent Events (SSE) support for easier integration with real-time architectures.

IPWorks LLM [Beta]

IPWorks LLM is a new component library for integrating large language model APIs into your applications. Components for the OpenAI, Anthropic, and Google Gemini APIs cover chat, streaming, tool calling, embeddings, token counting, and model listing. LLMClient also supports services that implement any of these APIs, including Ollama, vLLM, DeepSeek, Groq, and Azure OpenAI.

IPWorks LLM also supports C2PA Content Credentials. The C2PASigner component embeds a signed manifest in JPEG, PNG, and PDF files that records who produced the asset, which tool produced it, and whether generative AI was involved. The C2PAVerifier component reads those manifests and reports the result of each validation check.

IPWorks BLE

IPWorks BLE now includes the BLEServer component for hosting GATT servers in your application. BLEClient connects to the services exposed by other devices. BLEServer works in the other direction: your application defines its own services, characteristics, and descriptors, advertises them, and handles read, write, and subscribe requests from connected BLE clients.

With both components, a single application can act as a central, a peripheral, or both. Our BLEServer Getting Started Guide walks through adding services, advertising, and responding to client requests.

IPWorks Zip

IPWorks Zip adds the new Zstd and Lz4 components for Zstandard (RFC 8878) and LZ4 compression. Unlike the archive components, they have no file names or archive headers. They work directly on blocks of data and streams, which suits in-memory data and network transfer.

Lz4 favors speed over compression ratio. Zstd gives a better ratio for a similar amount of effort and is a good default. Both produce standard output that works with other implementations, including the zstd and lz4 command-line tools. See the Zstd and Lz4 Getting Started Guide to learn more.

Cloud SSO

Cloud SSO now includes the SCIMWeb and SCIMDesktop components for automated user provisioning. SCIM (System for Cross-domain Identity Management) lets identity providers like Microsoft Entra ID and Okta create, update, and deactivate users and groups in your application as changes are made in the directory.

The components implement the service provider side of SCIM 2.0. SCIMWeb plugs into an existing web application, and SCIMDesktop hosts its own HTTP server for desktop applications and background services. Our SCIM Getting Started Guide covers setup, authentication, and registering your application with an identity provider.

SAMLWeb and SAMLDesktop now also support encrypted assertions. Set the new ServiceProviderEncryptingCert property, and the components decrypt the assertion in the identity provider's SAML response before parsing it.

Additional Updates

Version 2026 comes with many other enhancements:

  • IPWorks Auth: New WebAuthn component for adding passwordless sign-in with Windows Hello and hardware security keys to your web application
  • IPWorks Encrypt: New MLKEM, MLDSA, CMAC, and HMAC components
  • IPWorks PGP: GnuPG v5 key format support for interoperability with GnuPG
  • IPWorks SSH: SSH server components now support multiple host keys
  • IPWorks Zip: Zip component now supports batching operations
  • IPWorks VoIP: Busy Lamp Field (BLF) support, and real-time call audio streaming for AI voice agents, with dynamic recording enabled by default
  • Secure PDF: Improvements in remote signing, PDF/A, and ZUGFeRD support, as well as font management and compatibility
  • Cloud Storage: New GetUploadStatus method recovers interrupted uploads from the server, and CloudFiles now supports resumable uploads
  • Cloud Storage: Dropbox Business support for team folders and namespaces
  • Cloud Storage: AWS IAM Identity Center (SSO) authentication for Amazon S3, and the new RetrieveCurrentUser method in OneDrive and SharePoint to identify the account behind an access token
  • Cloud Storage: Supabase support, Azure Blob versioning, bulk delete for S3-compatible storage, Google Cloud Storage, and Azure Blob, and OAuth support in the CloudFiles component
  • Cloud Mail: Microsoft 365 shared mailbox support
  • Cloud Keys: Azure Key Vault certificate support
  • All JavaScript Editions have been updated with support for TypeScript 7
Copyright © 2026 /n software, Inc.
Contact
Terms of Use
Privacy Statement