Developers of the OpenBSD project release of the portable edition of the package , which is a fork of OpenSSL aimed at providing a higher level of security. The LibreSSL project focuses on quality support for SSL/TLS protocols by removing unnecessary functionality, adding extra protection measures, and conducting significant cleanup and reworking of the codebase. The release of LibreSSL 2.9.1 is considered experimental, developing features that will be included in OpenBSD 6.5.
Changes in LibreSSL 2.9.1:
- Added the SM3 hash function (Chinese standard GB/T 32905-2016);
- Added the SM4 block cipher (Chinese standard GB/T 32907-2016);
- Added OPENSSL_NO_* macros to improve compatibility with OpenSSL;
- Partially ported the EC_KEY_METHOD from OpenSSL;
- Implemented missing API calls from OpenSSL 1.1;
- Added support for XChaCha20 and XChaCha20-Poly1305;
- Added support for AES key transmission through the EVP interface;
- Ensured automatic initialization of CRYPTO_LOCK;
- To enhance compatibility with OpenSSL, the openssl utility has added support for the pbkdf2 key derivation function, using sha25 as the default hashing method in the enc, crl, x509, and dgst commands;
- Added tests to verify portability between LibreSSL and OpenSSL
1.0/1.1; - Added additional Wycheproof tests;
- Added support for using the RSA PSS algorithm for digital signatures during connection handshakes;
- Added a finite state machine implementation for processing handshakes defined in RFC-8446;
- Removed outdated ASN.1 related code from libcrypto, which hasn't been used for about 20 years;
- Added assembler optimizations for 32-bit ARM systems and Mingw-w64;
- Improved compatibility with the Android platform.
Source: opennet.ru
