Vagadziri veOpenBSD purojekiti vakaratidza kuburitswa kweinotakurika edition yeLibreSSL 3.7.0 package, mukati umo forogo yeOpenSSL iri kugadzirwa, yakanangana nekupa mwero wepamusoro wechengetedzo. Iyo LibreSSL purojekiti yakanangana nerutsigiro rwemhando yepamusoro yeSSL/TLS mapuroteni nekubvisa zvisina basa basa, kuwedzera mamwe maficha ekuchengetedza, uye zvakanyanya kuchenesa nekugadzirisa kodhi base. LibreSSL 3.7.0 inoonekwa sekuburitswa kwekuyedza iyo inovandudza maficha anozoverengerwa muOpenBSD 7.3.
Zvimiro zveLibreSSL 3.7.0:
- Yakawedzerwa rutsigiro rweEd25519 yeruzhinji kiyi yedhijitari siginecha yakagadziriswa naDaniel Bernstein uye zvichibva paCurve25519 elliptic curve uye SHA-512 hash. Ed25519 tsigiro inowanikwa ese ari muchimiro cheyakasiyana primitive uye kuburikidza neEVP interface.
- Iyo EVP interface yakawedzera tsigiro yeX25519 siginecha yedhijitari, iyo inosiyana neEd25519 siginicha nekushandisa chete "X" maratidziro paunenge uchibata mapoinzi pane elliptic curve, iyo inogona kuderedza zvakanyanya huwandu hwekodhi inodiwa kugadzira uye kuona masiginecha.
- A yakaderera-level API yekushanda nemakiyi eruzhinji neakavanzika, anoenderana neOpenSSL 1.1, yaitwa, ichitsigira makiyi EVP_PKEY_ED25519, EVP_PKEY_HMAC uye EVP_PKEY_X25519.
- Panzvimbo peiyo system inoshanda timegm() uye gmtime(), POSIX mabasa kubva kuBoringSSL anoshandiswa kushandura mazuva.
- Raibhurari yeBN (BigNum) yakachenesa kodhi yekare uye isina kushandiswa inoshanda nenhamba huru.
- Yakabviswa rutsigiro rweHMAC PRIVATE KEY.
- Yakagadziridzwa kodhi yemukati yekugadzira uye yekutarisa masiginecha eDSA.
- Kodhi yekutumira makiyi eTLSv1.2 yakanyorwa patsva.
- Iyo yekare TLS stack yakacheneswa uye kugadzirwazve.
- Maitiro eBIO_read() uye BIO_write() mabasa ari padyo neOpenSSL 3.]
Source: opennet.ru