{"id":123436,"date":"2025-04-08T21:05:14","date_gmt":"2025-04-08T19:05:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0"},"modified":"2025-04-08T21:05:14","modified_gmt":"2025-04-08T19:05:14","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","title":{"rendered":"Publication de la biblioth\u00e8que cryptographique OpenSSL 3.5.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La biblioth\u00e8que OpenSSL 3.5.0 a \u00e9t\u00e9 publi\u00e9e, comprenant la mise en \u0153uvre des protocoles SSL\/TLS et divers algorithmes de chiffrement. OpenSSL 3.5 est class\u00e9 dans les versions avec support \u00e0 long terme (LTS), pour lesquelles les mises \u00e0 jour sont publi\u00e9es pendant 5 ans (jusqu'en avril 2030). Le support des anciennes branches OpenSSL 3.3, 3.2 et 3.0 LTS se poursuivra jusqu'en avril 2026, novembre 2025 et septembre 2026, respectivement. Le code du projet est distribu\u00e9 sous la licence Apache 2.0.     <\/p>\n<p>Principales nouveaut\u00e9s :   <\/p>\n<ul>\n<li class=\"l\"> Ajout de la prise en charge d'algorithmes cryptographiques r\u00e9sistants aux attaques par ordinateur quantique :\n<ul>\n<li class=\"l\"> ML-KEM (CRYSTALS-Kyber) \u2014 un algorithme d'\u00e9change de cl\u00e9s utilisant des m\u00e9thodes cryptographiques bas\u00e9es sur des probl\u00e8mes de th\u00e9orie des r\u00e9seaux, dont le temps de r\u00e9solution est \u00e9quivalent sur des ordinateurs classiques et quantiques.\n<li class=\"l\"> ML-DSA (CRYSTALS-Dilithium) \u2014 un algorithme de g\u00e9n\u00e9ration de signatures num\u00e9riques bas\u00e9 sur la th\u00e9orie des r\u00e9seaux.\n<li class=\"l\"> SLH-DSA (Sphincs+) \u2014 un algorithme de g\u00e9n\u00e9ration de signatures num\u00e9riques utilisant des m\u00e9thodes cryptographiques bas\u00e9es sur des fonctions de hachage. SLH-DSA est inf\u00e9rieur \u00e0 ML-DSA en termes de taille des signatures et de vitesse d'ex\u00e9cution, mais repose sur des principes math\u00e9matiques totalement diff\u00e9rents, ce qui le rend efficace en cas de compromission des algorithmes bas\u00e9s sur la th\u00e9orie des r\u00e9seaux.   <\/ul>\n<li class=\"l\"> Une prise en charge compl\u00e8te du protocole QUIC (RFC 9000) a \u00e9t\u00e9 mise en \u0153uvre, d\u00e9sormais disponible non seulement pour les applications clientes, mais aussi pour les applications serveur. QUIC est une couche sup\u00e9rieure au protocole UDP, prenant en charge le multiplexage de plusieurs connexions et fournissant des m\u00e9thodes de chiffrement \u00e9quivalentes \u00e0 TLS. Le protocole QUIC est utilis\u00e9 dans HTTP\/3 et a \u00e9t\u00e9 cr\u00e9\u00e9 comme une alternative \u00e0 l'association TCP+TLS, r\u00e9solvant les probl\u00e8mes de temps d'\u00e9tablissement et de n\u00e9gociation de connexions en TCP, tout en \u00e9liminant les retards dus \u00e0 la perte de paquets lors du transfert de donn\u00e9es.\n<li class=\"l\"> Ajout de la possibilit\u00e9 d'utiliser des piles tierces avec la mise en \u0153uvre du protocole QUIC, y compris des piles prenant en charge le mode 0-RTT (0 Round Trip Time), permettant de commencer imm\u00e9diatement le transfert de donn\u00e9es apr\u00e8s l'envoi du paquet d'\u00e9tablissement de la connexion.\n<li class=\"l\"> Ajout du support des objets sym\u00e9triques de cl\u00e9s opaques (EVP_SKEY), qui masquent les d\u00e9tails de l'impl\u00e9mentation de la cl\u00e9.\n<li class=\"l\"> Ajout du param\u00e8tre \u00ab no-tls-deprecated-ec \u00bb pour d\u00e9sactiver la prise en charge des groupes TLS d\u00e9clar\u00e9s obsol\u00e8tes dans le RFC-8422.\n<li class=\"l\"> Ajout du param\u00e8tre \u00ab enable-fips-jitter \u00bb, activant dans le fournisseur FIPS l'utilisation d'une source d'entropie bas\u00e9e sur le jitter, mis en \u0153uvre via la biblioth\u00e8que jitterentropy. La g\u00e9n\u00e9ration d'entropie \u00e0 partir du jitter est r\u00e9alis\u00e9e en mesurant les variations de temps lors de l'ex\u00e9cution r\u00e9p\u00e9t\u00e9e d'un ensemble donn\u00e9 d'instructions sur le CPU, d\u00e9pendant de nombreux facteurs internes et impr\u00e9visibles sans contr\u00f4le physique sur le CPU.\n<li class=\"l\"> Le CMP (Certificate Management Protocol) a ajout\u00e9 la prise en charge de la g\u00e9n\u00e9ration centralis\u00e9e de cl\u00e9s (la cl\u00e9 publique et la cl\u00e9 priv\u00e9e pour le client sont g\u00e9n\u00e9r\u00e9es du c\u00f4t\u00e9) <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-los-angeles\/\"   title=\"de serveurs\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3960\">de serveurs<\/a>).\n<li class=\"l\"> Ajout de la prise en charge de la fourniture de plusieurs ensembles de cl\u00e9s (keyshares) pour une seule connexion TLS.\n<li class=\"l\"> Ajout d'une API pour le pipelining, permettant de traiter simultan\u00e9ment plusieurs blocs de donn\u00e9es lors de l'utilisation de certains chiffrement, comme AES-GCM, qui prennent en charge des calculs parall\u00e8les.\n<li class=\"l\"> Dans les applications req, cms et smime, l'algorithme de chiffrement par d\u00e9faut a \u00e9t\u00e9 chang\u00e9 de des-ede3-cbc \u00e0 aes-256-cbc.\n<li class=\"l\"> Des groupes hybrides KEM (Key Encapsulation Mechanism), r\u00e9sistants aux attaques par ordinateur quantique, ont \u00e9t\u00e9 ajout\u00e9s \u00e0 la liste des chiffrements par d\u00e9faut pour TLS et s\u00e9lectionn\u00e9s comme prioritaires.\n<li class=\"l\"> Les algorithmes X25519MLKEM768 et X25519 ont \u00e9t\u00e9 ajout\u00e9s \u00e0 l'ensemble de cl\u00e9s (keyshares) utilis\u00e9s par d\u00e9faut dans TLS.\n<li class=\"l\"> Les fonctions BIO_meth_get_*() sont d\u00e9clar\u00e9es obsol\u00e8tes.        <\/ul>\n<p>Source : <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63039\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 3.5 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (LTS), \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 5 \u043b\u0435\u0442 (\u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430). \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.3, 3.2 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123436","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-08T19:05:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-04-08T19:05:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lancement de la biblioth\u00e8que cryptographique OpenSSL 3.5.0 | ProHoster","description":"La biblioth\u00e8que OpenSSL 3.5.0 a \u00e9t\u00e9 publi\u00e9e avec mise en \u0153uvre des protocoles SSL\/TLS et divers algorithmes de chiffrement.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-08T19:05:14+00:00","article:modified_time":"2025-04-08T19:05:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123436","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:50:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:05:22","updated":"2026-02-22 15:50:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/123436","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=123436"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/123436\/revisions"}],"predecessor-version":[{"id":162489,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/123436\/revisions\/162489"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=123436"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=123436"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=123436"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}