Kutulutsidwa kwa malaibulale achinsinsi a LibreSSL 3.1.0 ndi Botan 2.14.0

OpenBSD Project Madivelopa zoperekedwa kutulutsidwa kwa mtundu wonyamula wa phukusi LibreSSL 3.1.0, mkati momwe foloko ya OpenSSL ikupangidwira, cholinga chake ndi kupereka chitetezo chapamwamba. Pulojekiti ya LibreSSL ikuyang'ana pa chithandizo chapamwamba cha ndondomeko za SSL / TLS pochotsa ntchito zosafunikira, kuwonjezera zina zowonjezera chitetezo, ndikuyeretsa kwambiri ndi kukonzanso maziko a code. Kutulutsidwa kwa LibreSSL 3.1.0 kumatengedwa ngati kumasulidwa koyesera komwe kumapanga zinthu zomwe zidzaphatikizidwe mu OpenBSD 6.7.

Mawonekedwe a LibreSSL 3.1.0:

• Kukhazikitsa koyambirira kwa TLS 1.3 kukuperekedwa kutengera makina atsopano a boma ndi kagawo kakang'ono kogwirira ntchito ndi zolemba. Mwachikhazikitso, gawo lamakasitomala lokha la TLS 1.3 ndilololedwa pakalipano; gawo la seva likukonzekera kuti liziyambitsa mwachisawawa pakumasulidwa kwamtsogolo.
• Khodiyo yatsukidwa, kusanja kwa protocol ndikuwongolera kukumbukira kwasinthidwa.
• Njira za RSA-PSS ndi RSA-OAEP zachotsedwa ku OpenSSL 1.1.1.
• Kukhazikitsa kudachokera ku OpenSSL 1.1.1 ndikuyatsidwa mwachisawawa CMS (Syntax ya Mauthenga a Cryptographic). Lamulo la "cms" lawonjezeredwa ku ntchito ya openssl.
• Kugwirizana kwabwino ndi OpenSSL 1.1.1 pobwezera zosintha zina.
• Anawonjezera seti yayikulu yamayesero atsopano a cryptographic.
• Makhalidwe a EVP_chacha20() ali pafupi ndi semantics ya OpenSSL.
• Anawonjezera kuthekera kokonza malo a seti yokhala ndi ziphaso zovomerezeka.
• Mu ntchito ya openssl, lamulo la "req" limagwiritsa ntchito njira ya "-addext".

Komanso, tingadziŵike kumasulidwa laibulale ya cryptographic Botani 2.14.0, yogwiritsidwa ntchito mu polojekitiyi NeoPG, foloko ya GnuPG 2. Laibulale imapereka chopereka chachikulu zoyamba zopangidwa kale, zogwiritsidwa ntchito mu TLS protocol, X.509 certificates, AEAD ciphers, TPMs, PKCS#11, password hashing, ndi post-quantum cryptography (ma signatures a hash-based signatures ndi mgwirizano waukulu wozikidwa pa McEliece ndi NewHope). Laibulale yalembedwa mu C ++ 11 ndi zoperekedwa pansi pa layisensi ya BSD.

pakati kusintha m'magazini yatsopano ya Botan:

• Anawonjezera kukhazikitsa mode Mtengo wa GCM (Galois/Counter Mode), imathandizira mapurosesa a POWER8 pogwiritsa ntchito malangizo a vector a VPSUMD.
• Kwa machitidwe a ARM ndi POWER, kukhazikitsidwa kwa ma vector permutation opareshoni ya AES yokhala ndi nthawi yophatikizira nthawi zonse kwafulumizitsa kwambiri.
• Algorithm yatsopano ya modulo inversion yaperekedwa, yomwe imathamanga komanso imateteza bwino motsutsana ndi njira zapambali.
• Kukhathamiritsa kwapangidwa kuti kufulumizitse ECDSA/ECDH pochepetsa gawo la NIST.

Source: opennet.ru