The developers of the OpenBSD project have released a portable edition of the LibreSSL 4.3.0 package, which is a fork of OpenSSL aimed at providing a higher level of security. The LibreSSL project is focused on quality support for SSL/TLS protocols by removing unnecessary functionality, adding additional safeguards, and significantly cleaning up and reorganizing the codebase. The release of LibreSSL 4.3.0 is considered experimental, developing features that will be included in OpenBSD 7.9. This was followed by the release of LibreSSL 4.3.1, which fixes a build issue.
Key innovations in LibreSSL 4.3:
- For TLS, support has been implemented for the hybrid key exchange algorithm "mlkem768x25519", which is resistant to quantum computer attacks and is a combination of X25519 ECDH and the ML-KEM (CRYSTALS-Kyber) algorithm.
- The 'openssl speed' command now includes a performance test for the ML-KEM cryptographic algorithm.
- Support for the STARTTLS mechanism for establishing encrypted connections with the ManageSieve protocol (RFC 5804) has been implemented.
- Support for the RSASSA-PSS digital signature algorithm (RSA Signature Scheme with Appendix — Probabilistic Signature Scheme) has been added to libssl.
- A large number of internal changes and fixes have been made to improve compatibility with OpenSSL.
Source: opennet.ru
