OpenBSD Project Madivelopa kutulutsidwa kwa mtundu wonyamula wa phukusi , mkati momwe foloko ya OpenSSL ikupangidwira, cholinga chake ndi kupereka chitetezo chapamwamba. Pulojekiti ya LibreSSL ikuyang'ana pa chithandizo chapamwamba cha ndondomeko za SSL / TLS pochotsa ntchito zosafunikira, kuwonjezera zina zowonjezera chitetezo, ndikuyeretsa kwambiri ndi kukonzanso maziko a code. LibreSSL 3.1.1 imadziwika kuti ndiyo yoyamba yokhazikika ya nthambi ya 3.1, yomwe idzakhala gawo la OpenBSD 6.7 yotulutsidwa yomwe ikuyembekezeka m'masiku akubwerawa.
Mawonekedwe a LibreSSL 3.1.1:
- Kukhazikitsidwa kwa TLS 1.3 kutengera makina atsopano a boma komanso kagawo kakang'ono kogwirira ntchito ndi zolemba kwatha. Mwachikhazikitso, gawo lamakasitomala lokha la TLS 1.3 ndilololedwa pakalipano; gawo la seva likukonzekera kuti liziyambitsa mwachisawawa pakumasulidwa kwamtsogolo. OpenSSL TLS 1.3 API yogwirizana sinapezekebe.
- Kusintha kwa Cipher suite kwawonjezedwa kuti kuphatikizepo ma aligorivimu ofunikira pa TLSv1.3 ngati sanatchulidwe mwatsatanetsatane pakukambirana;
- Kupereka mayina achinsinsi ochokera ku gulu la TLSv1.3, lofotokozedwa mu RFC 8446;
- Njira za RSA-PSS ndi RSA-OAEP zasunthidwa kuchokera ku OpenSSL 1.1.1;
- Kuchokera ku OpenSSL 1.1.1, kukhazikitsidwa kwa CMS (Cryptographic Message Syntax) kwasungidwa ndikuyatsidwa mwachisawawa;
- Lamulo la "cms" lawonjezeredwa ku ntchito ya openssl, komanso zosankha za "req -addext" ndi "s_server -groups". Thandizo lowonjezera la mitundu yowonjezera ya TLSv1.3 ku "-tlsextdebug" njira;
; - Kugwirizana kwabwino ndi OpenSSL 1.1.1;
- Makhalidwe a EVP_chacha20 () ali pafupi ndi OpenSSL;
- Khodiyo yatsukidwa, kusintha kwapangidwa ku ntchito zogwirira ntchito ndi kukumbukira ndi kugawa ma protocol.
Source: opennet.ru