Published release of the library OpenSSL 4.1.0, offering implementation of TLS protocols and various encryption algorithms. OpenSSL 4.1 is classified as a regular support release, with updates released over a 13-month period. Support for the LTS branch of OpenSSL 3.5 will last until April 2030. The project code is distributed under the Apache 2.0 license.
- Added initial support for the Elbrus2000 (e2k).
- Added support for the DTLS protocol 1.3 (RFC 9147), which is an adaptation of TLS 1.3 for UDP and SCTP.
- In the API SSL Listener DTLS support has been added.
- Support for the GREASE mechanism has been added (RFC 8701, Generate Random Extensions And Sustain Extensibility), which, when negotiating a connection, adds dummy values to various fields of the TLS and DTLS protocols to check the correctness of their processing on servers and firewalls (the server should ignore unknown values and continue to negotiate a connection based on known ones).
- Added support for the IKEv2 (Internet Key Exchange) Key Derivation Function (KDF).
- Added support for new build targets VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 for building using MSVC 2013. Targets removed VC-WIN64I (Windows on Itanium systems) and VC-CE (Windows CE).
- Added ML-DSA and ML-KEM implementations optimized for the ppc64le architecture, as well as an ML-DSA option optimized for x86_64.
- Added AES-CBC decryption code option optimized using x86_64 extensions AVX-512 and VAES.
Additionally, you can note the release of a portable edition of the package LibreSSL 4.4.0, which develops a fork of OpenSSL. LibreSSL 4.4.0 is considered an experimental release that develops features that will be included in OpenBSD 8.1.
Changes in the new version of LibreSSL are mainly related to bug fixes, optimizations and compatibility issues with OpenSSL. Significantly improved support for the Windows platform and added support for building for macOS 27.0. Assembly optimizations for MIPS32 and MIPS64 are included. Improved SHA-3 performance.