{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"Rilascio della libreria crittografica OpenSSL 4.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00c8 stato pubblicato OpenSSL 4.0.0, che offre implementazioni dei protocolli TLS e vari algoritmi di crittografia. OpenSSL 4.0 \u00e8 classificato come un rilascio con ciclo di supporto normale, con aggiornamenti rilasciati per 13 mesi. Il supporto per le versioni precedenti OpenSSL 3.6, 3.5 LTS, 3.4 e 3.0 LTS durer\u00e0 fino a novembre 2026, aprile 2030, ottobre 2026 e settembre 2026 rispettivamente. Il codice del progetto \u00e8 distribuito con licenza Apache 2.0.     <\/p>\n<p>Novit\u00e0 principali:   <\/p>\n<ul>\n<li class=\"l\"> \u00c8 stata aggiunta la supporto per l'estensione TLS ECH (Encrypted ClientHello, RFC 9849), destinata a crittografare le informazioni sui parametri delle sessioni TLS, come il nome di dominio richiesto. A differenza dell'estensione ESNI (Encrypted Server Name Indication), in ECH viene crittografato l'intero messaggio ClientHello, bloccando cos\u00ec le perdite attraverso i campi non coperti da ESNI, come il campo PSK (Pre-Shared Key).\n<li class=\"l\"> \u00c8 stato aggiunto il supporto per determinati algoritmi descritti nella RFC 8998, che utilizzano un set di crittografia standardizzato in Cina, SM2: l'algoritmo di generazione di firme digitali sm2sig_sm3, il gruppo di scambio delle chiavi curveSM2 e il gruppo post-quantistico curveSM2MLKEM768.\n<li class=\"l\"> \u00c8 stata aggiunta la funzione crittografica di hashing cSHAKE, basata sull'algoritmo SHA-3, che consente di generare hash diversi basati sugli stessi dati di input per proteggersi contro attacchi di riutilizzo dei dati.\n<li class=\"l\"> \u00c8 stato aggiunto un algoritmo ibrido \u00abML-DSA-MU\u00bb, che combina l'algoritmo post-quantistico di creazione della firma digitale ML-DSA (CRYSTALS-Dilithium) con la funzione di hash classica SHAKE256.\n<li class=\"l\"> \u00c8 stato aggiunto il supporto per le funzioni di derivazione delle chiavi SNMP KDF basate su HMAC-SHA e SRTP KDF basate su AES-CM, utilizzate nei protocolli di rete SNMPv3 e SRTP per la creazione di chiavi crittografiche.\n<li class=\"l\"> Nel comando \u00abopenssl fipsinstall\u00bb \u00e8 stata aggiunta l'opzione \u00ab-defer_tests\u00bb, che consente di posticipare l'esecuzione dei test durante l'installazione dei moduli FIPS.\n<li class=\"l\"> Per la piattaforma Windows \u00e8 stato implementato il supporto per l'utilizzo del legame statico o dinamico con Visual C++ Runtime.\n<li class=\"l\"> In TLS 1.2 \u00e8 stato aggiunto il supporto per la negoziazione dello scambio delle chiavi basato sull'algoritmo FFDHE, secondo la RFC 7919.\n<li class=\"l\"> \u00c8 stato interrotto il supporto per SSLv3 e SSLv2 Client Hello.\n<li class=\"l\"> \u00c8 stata rimossa la supporto per i motori caricati dinamicamente, per cui per ampliare le funzionalit\u00e0 di OpenSSL si dovrebbe utilizzare il concetto di provider modulare.\n<li class=\"l\"> Nel TLS, durante la fase di compilazione, \u00e8 stato disabilitato il supporto per curve ellittiche obsolete. Per ripristinarlo, \u00e8 possibile utilizzare l'opzione \u00abenable-tls-deprecated-ec\u00bb.\n<li class=\"l\"> \u00c8 stato rimosso lo strumento c_rehash, mentre ora \u00e8 necessario utilizzare il comando \u00abopenssl rehash\u00bb.\n<li class=\"l\"> Dalla command \u00abopenssl ca\u00bb \u00e8 stata rimossa l'opzione obsoleta \u00abmsie-hack\u00bb.\n<li class=\"l\"> \u00c8 stato rimosso il supporto per metodi proprietari EVP_CIPHER, EVP_MD, EVP_PKEY e EVP_PKEY_ASN1.\n<li class=\"l\"> Sono state rimosse le funzioni obsolete SSL\/TLS legate a versioni fisse dei protocolli, come \u00abTLSv1_client_method()\u00bb.\n<li class=\"l\"> Sono state rimosse le funzioni obsolete ERR_get_state(), ERR_remove_state() e ERR_remove_thread_state().\n<li class=\"l\"> \u00c8 stata interrotta la supporto per le piattaforme target darwin-i386{,-cc} e darwin-ppc{,64}{,-cc}.  <\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65208\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 4.0 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.6, 3.5 LTS, 3.4 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rilascio della libreria crittografica OpenSSL 4.0.0 | ProHoster","description":"\u00c8 stato rilasciato OpenSSL 4.0.0, che offre l'implementazione dei protocolli TLS e vari algoritmi di crittografia.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-14T21:12:07+00:00","article:modified_time":"2026-04-14T21:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/168753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=168753"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/168753\/revisions"}],"predecessor-version":[{"id":169172,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/168753\/revisions\/169172"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=168753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=168753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=168753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}