The OpenSSL Project announced OpenSSL 4.1, bringing DTLS 1.3 support, GREASE implementation, and hardware-specific cryptographic optimizations.
This release includes optimized Number Theoretic Transform operations for ML-DSA and ML-KEM on PPC64LE, AVX-512 SHAKE x4 enhancements for ML-DSA on x86-64, and new AES-CBC VAES optimizations alongside architecture updates.
The most important addition is support for the DTLS 1.3 protocol, which provides security for communications based on data packets that can be lost or delayed. At the same time, the new version incorporates a mechanism that prevents programs from relying on fixed values, facilitating future upgrades without compatibility issues.
Speed improvements and new features
Special emphasis was placed on the speed of mathematical operations for next-generation cryptography, offering improvements to specific processor types. Among other things, optimizations were added for faster calculations and faster data decoding, as well as support for the Elbrus2000 processor architecture.
The new version also expands connection management capabilities and adds support for additional encryption features.
READ ALSO
LibreSSL 4.4 released with new encryption options and defense improvements
Changes and known issues
Some older options and settings have been removed, such as the ability to individually disable specific features that now require a single setting. At the same time, a data recovery tool has changed the way it leverages external libraries.
The development team has identified four known issues that are specific to the operation of the new communication protocol. These include difficulties in resending data after key renewal messages, incorrect error reporting on connections, and failed connection attempts under packet loss conditions.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)