{"id":114239,"date":"2024-03-10T12:25:43","date_gmt":"2024-03-10T10:25:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0"},"modified":"2024-03-10T12:25:43","modified_gmt":"2024-03-10T10:25:43","slug":"vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","title":{"rendered":"Vyd\u00e1n\u00ed kryptografick\u00e9 knihovny LibreSSL 3.9.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00fdvoj\u00e1\u0159i projektu OpenBSD p\u0159edstavili vyd\u00e1n\u00ed p\u0159enosn\u00e9 edice bal\u00edku LibreSSL 3.9.0, v r\u00e1mci kter\u00e9ho se rozv\u00edj\u00ed fork OpenSSL zam\u011b\u0159en\u00fd na zaji\u0161t\u011bn\u00ed vy\u0161\u0161\u00ed \u00farovn\u011b bezpe\u010dnosti. Projekt LibreSSL se orientuje na kvalitn\u00ed podporu protokol\u016f SSL\/TLS s odstran\u011bn\u00edm nadbyte\u010dn\u00e9 funk\u010dnosti, p\u0159id\u00e1n\u00edm dal\u0161\u00edch bezpe\u010dnostn\u00edch opat\u0159en\u00ed a proveden\u00edm v\u00fdrazn\u00e9ho \u00faklidu a p\u0159epracov\u00e1n\u00ed k\u00f3dov\u00e9 z\u00e1kladny. Vyd\u00e1n\u00ed LibreSSL 3.9.0 je pova\u017eov\u00e1no za experiment\u00e1ln\u00ed, ve kter\u00e9m se rozv\u00edjej\u00ed funkce, kter\u00e9 se stanou sou\u010d\u00e1st\u00ed OpenBSD 7.5. Sou\u010dasn\u011b byl vytvo\u0159en stabiln\u00ed vyd\u00e1n\u00ed LibreSSL 3.8.3, kter\u00e9 opravilo n\u011bkolik specifick\u00fdch chyb pro Windows a pos\u00edlilo podporu mechanismu ochrany CET (Control-flow Enforcement Technology).      <\/p>\n<p>Vlastnosti LibreSSL 3.9.0:   <\/p>\n<ul>\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora algoritm\u016f digit\u00e1ln\u00edho podpisu zalo\u017een\u00fdch na ECDSA s hashovac\u00edmi funkcemi SHA-3.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora HMAC s zkr\u00e1cen\u00fdmi hashe SHA-2 a SHA-3 jako PBE PRF.\n<li class=\"l\"> Byly provedeny \u00fapravy pro zlep\u0161en\u00ed p\u0159enositelnosti na jin\u00e9 platformy. Aby se p\u0159ede\u0161lo probl\u00e9m\u016fm p\u0159i statick\u00e9m spojov\u00e1n\u00ed, v\u011bt\u0161ina symbol\u016f exportovan\u00fdch pro zaji\u0161t\u011bn\u00ed kompatibility v LibreSSL je opat\u0159ena p\u0159edponou \u201elibressl_\u201c. V sestav\u00e1ch zalo\u017een\u00fdch na CMake byl zastaven export kompatibiln\u00edch symbol\u016f libcrypto.\n<li class=\"l\"> Byly provedeny zm\u011bny zam\u011b\u0159en\u00e9 na zlep\u0161en\u00ed kompatibility s OpenSSL. Nap\u0159\u00edklad byly p\u0159id\u00e1ny aliasy ChaCha20 a chacha20 pro algoritmus ChaCha, sjednocena pr\u00e1ce funkc\u00ed SSL_library_init() a OPENSSL_init_ssl(), byly p\u0159izp\u016fsobeny chov\u00e1n\u00ed OpenSSL vol\u00e1n\u00ed EVP_{CIPHER,MD}_CTX_init().\n<li class=\"l\"> Do n\u00e1stroje openssl byla p\u0159id\u00e1na podpora p\u0159\u00edznak\u016f \u201e-new -force_pubkey\u201c, \u201e-multivalue-rdn\u201c, \u201e-set_issuer\u201c, \u201e-set_subject\u201c a \u201e-utf8\u201c.\n<li class=\"l\"> Byl proveden p\u0159echod z pou\u017eit\u00ed vol\u00e1n\u00ed OBJ_bsearch_() na standardn\u00ed funkci bsearch().\n<li class=\"l\"> Byla zjednodu\u0161ena implementace funkce by_file_ctrl(), EVP_Cipher{Init,Update,Final}() a API OBJ_*.\n<li class=\"l\"> Byla provedena velk\u00e1 reorganizace API EVP. Byly odstran\u011bny funkce EVP_add_{cipher,digest}().\n<li class=\"l\"> Byla zjednodu\u0161ena obsluha X509_TRUST.\n<li class=\"l\"> Funkce BIO_dump*() byly p\u0159eps\u00e1ny.\n<li class=\"l\"> Byla ukon\u010dena podpora glob\u00e1ln\u00edch tabulek, kter\u00e9 nejsou p\u0159izp\u016fsobeny pro v\u00edcestandardn\u00ed pou\u017eit\u00ed. V d\u016fsledku toho ji\u017e nen\u00ed podporov\u00e1no p\u0159i\u0159azen\u00ed alias\u016f \u0161ifrovac\u00edm a hashovac\u00edm funkc\u00edm, p\u0159id\u00e1n\u00ed vlastn\u00edch \u0159et\u011bzc\u016f, metod ASN.1, PKEY a CRL.\n<li class=\"l\"> Byly odstran\u011bny funkce BIO_set(), BIO_{sn,v,vsn}printf(), sk_find_ex() a OBJ_bsearch_(), stejn\u011b jako mno\u017estv\u00ed zastaral\u00fdch funkc\u00ed API CRYPTO.\n<li class=\"l\"> Byl ukon\u010den ve\u0159ejn\u00fd p\u0159\u00edstup k API X509_CERT_AUX a X509_TRUST.\n<li class=\"l\"> Podpora algoritm\u016f GOST a STREEBOG byla ukon\u010dena.\n<li class=\"l\"> Roz\u0161\u00ed\u0159ena podpora mechanismu CET (Control-flow Enforcement Technology), kter\u00fd se pou\u017e\u00edv\u00e1 k ochran\u011b p\u0159ed exploity zalo\u017een\u00fdmi na technik\u00e1ch n\u00e1vratov\u00e9ho orientovan\u00e9ho programov\u00e1n\u00ed (ROP, Return-Oriented Programming).     <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60765\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 LibreSSL 3.9.0, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u043e\u0440\u043a OpenSSL, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0447\u0438\u0441\u0442\u043a\u0438 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b. \u0412\u044b\u043f\u0443\u0441\u043a LibreSSL 3.9.0 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114239","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 LibreSSL 3.9.0, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u043e\u0440\u043a OpenSSL, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LibreSSL 3.9.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 LibreSSL 3.9.0, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u043e\u0440\u043a OpenSSL, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-03-10T10:25:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-03-10T10:25:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vyd\u00e1n\u00ed kryptografick\u00e9 knihovny LibreSSL 3.9.0 | ProHoster","description":"V\u00fdvoj\u00e1\u0159i projektu OpenBSD p\u0159edstavili p\u0159enosnou edici bal\u00edku LibreSSL 3.9.0, kter\u00e1 je forkem OpenSSL zam\u011b\u0159en\u00fdm na zaji\u0161t\u011bn\u00ed vy\u0161\u0161\u00ed \u00farovn\u011b bezpe\u010dnosti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LibreSSL 3.9.0 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 LibreSSL 3.9.0, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u043e\u0440\u043a OpenSSL, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-10T10:25:43+00:00","article:modified_time":"2024-03-10T10:25:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=114239"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114239\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=114239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=114239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=114239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}