{"id":123436,"date":"2025-04-08T21:05:14","date_gmt":"2025-04-08T19:05:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0"},"modified":"2025-04-08T21:05:14","modified_gmt":"2025-04-08T19:05:14","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","title":{"rendered":"Lansarea bibliotecii criptografice OpenSSL 3.5.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A avut loc lansarea bibliotecii OpenSSL 3.5.0 cu implementarea protocoalelor SSL\/TLS \u0219i a diferitelor algoritmi de criptare. OpenSSL 3.5 este clasificat ca un release cu suport pe termen lung (LTS), actualiz\u0103rile fiind eliberate timp de 5 ani (p\u00e2n\u0103 \u00een aprilie 2030). Suportul pentru versiunile anterioare OpenSSL 3.3, 3.2 \u0219i 3.0 LTS va dura p\u00e2n\u0103 \u00een aprilie 2026, noiembrie 2025 \u0219i septembrie 2026, respectiv. Codul proiectului este distribuit sub licen\u021ba Apache 2.0.     <\/p>\n<p>Principalele nout\u0103\u021bi:   <\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suport pentru algoritmi criptografici rezisten\u021bi la atacuri cu computere cuantice:\n<ul>\n<li class=\"l\"> ML-KEM (CRYSTALS-Kyber) \u2014 algoritmul de schimb de chei, care folose\u0219te metode de criptografie bazate pe solu\u021bionarea problemelor din teoria re\u021belelor, timpul de solu\u021bionare fiind similar at\u00e2t pe computere clasice, c\u00e2t \u0219i pe cele cuantice.\n<li class=\"l\"> ML-DSA (CRYSTALS-Dilithium) \u2014 algoritm pentru generarea de semn\u0103turi digitale, bazat pe teoria re\u021belelor.\n<li class=\"l\"> SLH-DSA (Sphincs+) \u2014 algoritm pentru generarea de semn\u0103turi digitale, care aplic\u0103 metode de criptografie bazate pe func\u021bii hash. SLH-DSA este inferior ML-DSA \u00een ceea ce prive\u0219te dimensiunea semn\u0103turilor \u0219i viteza de func\u021bionare, dar se bazeaz\u0103 pe principii matematice complet diferite, ceea ce \u00eenseamn\u0103 c\u0103 va r\u0103m\u00e2ne eficient \u00een cazul compromiterii algoritmilor bazate pe teoria re\u021belelor.   <\/ul>\n<li class=\"l\"> A fost implementat suportul complet pentru protocolul QUIC (RFC 9000), care este acum disponibil nu doar pentru aplica\u021bii client, ci \u0219i pentru aplica\u021bii server. QUIC reprezint\u0103 un strat deasupra protocolului UDP, suport\u00e2nd multiplexarea mai multor conexiuni \u0219i oferind metode de criptare echivalente cu TLS. Protocolul QUIC este folosit \u00een HTTP\/3 \u0219i a fost creat ca o alternativ\u0103 la combina\u021bia TCP+TLS, rezolv\u00e2nd problemele cu timpii mari de ini\u021biere \u0219i de negociere a conexiunilor \u00een TCP, precum \u0219i elimin\u00e2nd \u00eent\u00e2rzierile cauzate de pierderea pachetelor \u00een timpul transmisiei de date.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 posibilitatea de a utiliza stive externe cu implementarea protocolului QUIC, inclusiv stive care suport\u0103 modul 0-RTT (0 Round Trip Time), permi\u021b\u00e2nd \u00eenceperea imediat\u0103 a transmisiei de date dup\u0103 trimiterea pachetului de stabilire a conexiunii.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suportul pentru obiecte opace (opaque) ale cheilor simetrice (EVP_SKEY), care ascund detaliile implement\u0103rii cheii.\n<li class=\"l\"> A fost ad\u0103ugat parametrul \u201eno-tls-deprecated-ec\u201d pentru a dezactiva suportul pentru grupurile TLS declarate \u00eenvechite \u00een RFC-8422.\n<li class=\"l\"> A fost ad\u0103ugat parametrul \u201eenable-fips-jitter\u201d, care activeaz\u0103 utilizarea unei surse de entropie bazate pe jitter \u00een providerul FIPS, implementat\u0103 prin biblioteca jitterentropy. Generarea entropiei pe baza jitterului se realizeaz\u0103 prin m\u0103surarea diferen\u021belor \u00een timpul repet\u0103rii unui set specific de instruc\u021biuni pe CPU, care depinde de mul\u021bi factori interni \u0219i este imprevizibil f\u0103r\u0103 control fizic asupra CPU-ului.\n<li class=\"l\"> \u00cen CMP (Certificate Management Protocol) a fost ad\u0103ugat\u0103 suport pentru generarea centralizat\u0103 a cheilor (cheia public\u0103 \u0219i cheia privat\u0103 pentru client sunt generate pe partea serverului). <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3960\">server<\/a>).\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suport pentru furnizarea mai multor seturi de chei (keyshares) pentru o singur\u0103 conexiune TLS.\n<li class=\"l\"> A fost ad\u0103ugat API pentru procesarea \u00een conduct\u0103 (pipelining), care permite procesarea simultan\u0103 a mai multor blocuri de date utiliz\u00e2nd anumite cifre, cum ar fi AES-GCM, care suport\u0103 calculul paralel.\n<li class=\"l\"> \u00cen aplica\u021biile req, cms \u0219i smime, algoritmul de criptare implicit a fost schimbat de la des-ede3-cbc la aes-256-cbc.\n<li class=\"l\"> \u00cen lista de cifre implicite pentru TLS au fost incluse \u0219i selectate prioritare grupuri hibride KEM (Key Encapsulation Mechanism), rezistente la atacurile cu computere cuantice.\n<li class=\"l\"> \u00cen setul de chei (keyshares), utilizate implicit \u00een TLS, au fost ad\u0103ugate algoritmii X25519MLKEM768 \u0219i X25519.\n<li class=\"l\"> Func\u021biile BIO_meth_get_*() au fost declarate \u00eenvechite.        <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63039\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 3.5 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (LTS), \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 5 \u043b\u0435\u0442 (\u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430). \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.3, 3.2 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123436","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-08T19:05:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-04-08T19:05:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansare a bibliotecii criptografice OpenSSL 3.5.0 | ProHoster","description":"A avut loc lansarea bibliotecii OpenSSL 3.5.0 cu implementarea protocoalelor SSL\/TLS \u0219i diferitelor algoritmi de criptare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.5.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-08T19:05:14+00:00","article:modified_time":"2025-04-08T19:05:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123436","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:50:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:05:22","updated":"2026-02-22 15:50:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123436","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=123436"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123436\/revisions"}],"predecessor-version":[{"id":162489,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123436\/revisions\/162489"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=123436"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=123436"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=123436"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}