Masu haɓaka aikin OpenBSD sun gabatar da sakin fakitin LibreSSL 3.6.0 mai ɗaukar hoto, wanda a cikinsa ake haɓaka cokali mai yatsu na OpenSSL, da nufin samar da babban matakin tsaro. Aikin LibreSSL yana mayar da hankali ne akan babban goyon baya ga ka'idodin SSL/TLS ta hanyar cire ayyukan da ba dole ba, ƙara ƙarin fasalulluka na tsaro, da mahimmancin tsaftacewa da sake yin aiki da tushe na lambar. Ana ɗaukar LibreSSL 3.6.0 a matsayin saki na gwaji wanda ke haɓaka fasalulluka waɗanda za a haɗa su cikin OpenBSD 7.2.
Siffofin LibreSSL 3.6.0:
- API ɗin EVP na HKDF (HMAC Key Derivation Aiki) aikin tsara maɓalli an aika daga OpenSSL.
- API ɗin da aka ƙara don saiti da samun matakan tsaro - SSL_{,CTX}_{samu, saita}_security_level().
- Ƙara goyon bayan API na gwaji don ƙa'idar QUIC, wanda aka fara aiwatar da shi a cikin BoringSSL.
- Ƙara tallafi na farko don tabbatarwa na TS ESSCertIDv2.
- Ana amfani da gwajin farko na Bailey-Pomerantz-Selfridge-Wagstaff (Baillie-PSW) maimakon gwajin Miller-Rabin.
- An gudanar da gagarumin aikin na cikin gida. Cire madaidaicin albarkatun RFC 3779 cak lokacin tabbatar da takaddun shaida. An sake fasalin mai yankewa da mai sarrafa lokaci na ASN.1. An sake rubuta aiwatar da ASN1_STRING_zuwa_UTF8().
- Ƙara -"s" zaɓi don buɗe mai amfani don nuna kawai ciphers da ke goyan bayan ƙayyadaddun yarjejeniya.
source: budenet.ru