{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"Lansarea bibliotecii criptografice OpenSSL 4.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A avut loc lansarea bibliotecii OpenSSL 4.0.0, care ofer\u0103 implementarea protocoalelor TLS \u0219i a diferitelor algoritmi de criptare. OpenSSL 4.0 este clasificat ca o versiune cu suport obi\u0219nuit, actualiz\u0103rile fiind lansate timp de 13 luni. Suportul pentru versiunile anterioare OpenSSL 3.6, 3.5 LTS, 3.4 \u0219i 3.0 LTS va dura p\u00e2n\u0103 \u00een noiembrie 2026, aprilie 2030, octombrie 2026 \u0219i septembrie 2026, respectiv. Codul proiectului este distribuit sub licen\u021ba Apache 2.0.     <\/p>\n<p>Principalele nout\u0103\u021bi:   <\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suportul pentru extensia TLS ECH (Encrypted ClientHello, RFC 9849), destinat\u0103 cript\u0103rii informa\u021biilor despre parametrii sesiunilor TLS, cum ar fi numele de domeniu solicitat. Spre deosebire de extensia ESNI (Encrypted Server Name Indication), \u00een ECH este criptat \u00eentreg mesajul TLS ClientHello, permi\u021b\u00e2nd blocarea scurgerilor prin c\u00e2mpuri pe care ESNI nu le acoper\u0103, cum ar fi c\u00e2mpul PSK (Pre-Shared Key).\n<li class=\"l\"> A fost ad\u0103ugat suportul pentru anumite algoritmi defini\u021bi \u00een RFC 8998, care utilizeaz\u0103 un set standardizat de algoritmi criptografici SM2 din China: algoritmul de generare a semn\u0103turii digitale sm2sig_sm3, grupul de schimb de chei curveSM2 \u0219i grupul post-cuantic curveSM2MLKEM768.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 func\u021bia criptografic\u0103 de hash cSHAKE, bazat\u0103 pe algoritmul SHA-3, care permite generarea de hash-uri diferite pe baza acelora\u0219i date de intrare pentru a proteja \u00eempotriva atacurilor care manipuleaz\u0103 reutilizarea datelor.\n<li class=\"l\"> A fost ad\u0103ugat un algoritm hibrid \u201eML-DSA-MU\u201d, care combin\u0103 algoritmul post-quantum de generare a semn\u0103turii digitale ML-DSA (CRYSTALS-Dilithium) cu func\u021bia de hash clasic\u0103 SHAKE256.\n<li class=\"l\"> A fost ad\u0103ugat suport pentru func\u021biile de generare a cheilor SNMP KDF bazate pe HMAC-SHA \u0219i SRTP KDF pe baza AES-CM, utilizate \u00een protocoalele de re\u021bea SNMPv3 \u0219i SRTP pentru crearea de chei criptografice.\n<li class=\"l\"> Echipei \u201eopenssl fipsinstall\u201d i s-a ad\u0103ugat op\u021biunea \u201e-defer_tests\u201d, care permite am\u00e2narea execu\u021biei testelor la instalarea modulelor FIPS.\n<li class=\"l\"> Pentru platforma Windows a fost implementat suportul pentru utilizarea leg\u0103turii statice sau dinamice cu Visual C++ Runtime.\n<li class=\"l\"> \u00cen TLS 1.2 a fost ad\u0103ugat suportul pentru negocierile de schimb de chei bazate pe algoritmul FFDHE, conform RFC 7919.\n<li class=\"l\"> Suportul pentru SSLv3 \u0219i SSLv2 Client Hello a fost oprit.\n<li class=\"l\"> Suportul pentru modulele \u00eenc\u0103rcate dinamic a fost eliminat, \u00een locul acestora, pentru extinderea func\u021bionalit\u0103\u021bii OpenSSL se recomand\u0103 utilizarea conceptului de furnizori pluggable.\n<li class=\"l\"> \u00cen TLS, suportul pentru curbele eliptice \u00eenvechite a fost dezactivat \u00een etapa de compilare. Pentru a reveni la suport, se poate folosi op\u021biunea \u201eenable-tls-deprecated-ec\u201d.\n<li class=\"l\"> Utilitarul c_rehash a fost eliminat, iar \u00een locul acestuia urmeaz\u0103 s\u0103 folosi\u021bi comanda \u201eopenssl rehash\u201d.\n<li class=\"l\"> Op\u021biunea \u00eenvechit\u0103 \u201emsie-hack\u201d a fost eliminat\u0103 din comanda \u201eopenssl ca\u201d.\n<li class=\"l\"> Suportul pentru metodele proprietare EVP_CIPHER, EVP_MD, EVP_PKEY \u0219i EVP_PKEY_ASN1 a fost eliminat.\n<li class=\"l\"> Func\u021biile \u00eenvechite SSL\/TLS, legate de versiuni fixe ale protocoalelor, de exemplu, \u201eTLSv1_client_method()\u201d, au fost eliminate.\n<li class=\"l\"> Func\u021biile \u00eenvechite ERR_get_state(), ERR_remove_state() \u0219i ERR_remove_thread_state() au fost eliminate.\n<li class=\"l\"> Suportul pentru platformele \u021bint\u0103 darwin-i386{,-cc} \u0219i darwin-ppc{,64}{,-cc} a fost suspendat.  <\/ul>\n<p>Sursa: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65208\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 4.0 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.6, 3.5 LTS, 3.4 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea bibliotecii criptografice OpenSSL 4.0.0 | ProHoster","description":"A fost lansat\u0103 biblioteca OpenSSL 4.0.0, care ofer\u0103 implement\u0103ri ale protocoalelor TLS \u0219i diverse algoritmi de criptare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-14T21:12:07+00:00","article:modified_time":"2026-04-14T21:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/168753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=168753"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/168753\/revisions"}],"predecessor-version":[{"id":169172,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/168753\/revisions\/169172"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=168753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=168753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=168753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}