{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"Sortie de la biblioth\u00e8que cryptographique OpenSSL 4.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La biblioth\u00e8que OpenSSL 4.0.0 a \u00e9t\u00e9 publi\u00e9e, offrant une impl\u00e9mentation des protocoles TLS et divers algorithmes de cryptage. OpenSSL 4.0 est class\u00e9 parmi les versions avec un cycle de support normal, dont les mises \u00e0 jour sont publi\u00e9es pendant 13 mois. Le support des anciennes versions OpenSSL 3.6, 3.5 LTS, 3.4 et 3.0 LTS se poursuivra jusqu'en novembre 2026, avril 2030, octobre 2026 et septembre 2026 respectivement. Le code du projet est distribu\u00e9 sous la licence Apache 2.0.     <\/p>\n<p>Principales nouveaut\u00e9s :   <\/p>\n<ul>\n<li class=\"l\"> Ajout du support de l'extension TLS ECH (Encrypted ClientHello, RFC 9849), destin\u00e9e \u00e0 chiffrer les informations sur les param\u00e8tres de sessions TLS, telles que le nom de domaine demand\u00e9. Contrairement \u00e0 l'extension ESNI (Encrypted Server Name Indication), dans l'ECH, c'est l'int\u00e9gralit\u00e9 du message TLS ClientHello qui est chiffr\u00e9, bloquant ainsi les fuites \u00e0 travers des champs que l'ESNI ne couvre pas, par exemple le champ PSK (Pre-Shared Key).\n<li class=\"l\"> Ajout du support des algorithmes d\u00e9finis dans la RFC 8998 utilisant un ensemble d'algorithmes de cryptographie standardis\u00e9 en Chine SM2 : l'algorithme de formation de signature num\u00e9rique sm2sig_sm3, le groupe d'\u00e9change de cl\u00e9s curveSM2 et le groupe post-quantique curveSM2MLKEM768.\n<li class=\"l\"> Ajout de la fonction de hachage cryptographique cSHAKE, bas\u00e9e sur l'algorithme SHA-3 et permettant de g\u00e9n\u00e9rer diff\u00e9rents hachages \u00e0 partir des m\u00eames donn\u00e9es d'entr\u00e9e pour se prot\u00e9ger contre les attaques manipulant la r\u00e9utilisation des donn\u00e9es.\n<li class=\"l\"> Un algorithme hybride &#171;ML-DSA-MU&#187; a \u00e9t\u00e9 ajout\u00e9, combinant l'algorithme post-quantique de formation de signature num\u00e9rique ML-DSA (CRYSTALS-Dilithium) avec la fonction de hachage classique SHAKE256.\n<li class=\"l\"> Ajout du support des fonctions de g\u00e9n\u00e9ration de cl\u00e9s SNMP KDF bas\u00e9es sur HMAC-SHA et SRTP KDF bas\u00e9es sur AES-CM, utilis\u00e9es dans les protocoles r\u00e9seau SNMPv3 et SRTP pour cr\u00e9er des cl\u00e9s cryptographiques.\n<li class=\"l\"> L'option &#171;-defer_tests&#187; a \u00e9t\u00e9 ajout\u00e9e \u00e0 l'\u00e9quipe &#171;openssl fipsinstall&#187;, permettant de retarder l'ex\u00e9cution des tests lors de l'installation des modules FIPS.\n<li class=\"l\"> La prise en charge de la plate-forme Windows a \u00e9t\u00e9 ajout\u00e9e pour l'utilisation de lier statique ou dynamique avec Visual C++ Runtime.\n<li class=\"l\"> Dans TLS 1.2, le support de l'accord d'\u00e9change de cl\u00e9s bas\u00e9 sur l'algorithme FFDHE, conforme \u00e0 la RFC 7919, a \u00e9t\u00e9 ajout\u00e9.\n<li class=\"l\"> Le support pour SSLv3 et SSLv2 Client Hello a \u00e9t\u00e9 supprim\u00e9.\n<li class=\"l\"> Le support des moteurs charg\u00e9s dynamiquement a \u00e9t\u00e9 supprim\u00e9, \u00e0 la place, la fonctionnalit\u00e9 d'OpenSSL doit \u00eatre \u00e9tendue en utilisant le concept de fournisseurs modulaires.\n<li class=\"l\"> Dans TLS, la prise en charge des anciennes courbes elliptiques a \u00e9t\u00e9 d\u00e9sactiv\u00e9e \u00e0 l'\u00e9tape de compilation. L'option &#171;enable-tls-deprecated-ec&#187; peut \u00eatre utilis\u00e9e pour la r\u00e9activer.\n<li class=\"l\"> L'outil c_rehash a \u00e9t\u00e9 supprim\u00e9, la commande &#171;openssl rehash&#187; doit d\u00e9sormais \u00eatre utilis\u00e9e \u00e0 la place.\n<li class=\"l\"> L'option obsol\u00e8te &#171;msie-hack&#187; a \u00e9t\u00e9 supprim\u00e9e de la commande &#171;openssl ca&#187;.\n<li class=\"l\"> Le support des m\u00e9thodes propri\u00e9taires EVP_CIPHER, EVP_MD, EVP_PKEY et EVP_PKEY_ASN1 a \u00e9t\u00e9 supprim\u00e9.\n<li class=\"l\"> Des fonctions obsol\u00e8tes SSL\/TLS li\u00e9es \u00e0 des versions fixes des protocoles, comme &#171;TLSv1_client_method()&#187;, ont \u00e9t\u00e9 supprim\u00e9es.\n<li class=\"l\"> Les fonctions obsol\u00e8tes ERR_get_state(), ERR_remove_state() et ERR_remove_thread_state() ont \u00e9t\u00e9 supprim\u00e9es.\n<li class=\"l\"> Le support des plateformes cibles darwin-i386{,-cc} et darwin-ppc{,64}{,-cc} a \u00e9t\u00e9 interrompu.  <\/ul>\n<p>Source : <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65208\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 4.0 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.6, 3.5 LTS, 3.4 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Lancement de la biblioth\u00e8que cryptographique OpenSSL 4.0.0 | ProHoster","description":"La biblioth\u00e8que OpenSSL 4.0.0 a \u00e9t\u00e9 publi\u00e9e, offrant l'impl\u00e9mentation des protocoles TLS et divers algorithmes de chiffrement.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-14T21:12:07+00:00","article:modified_time":"2026-04-14T21:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=168753"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168753\/revisions"}],"predecessor-version":[{"id":169172,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/168753\/revisions\/169172"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=168753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=168753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=168753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}