{"id":123436,"date":"2025-04-08T21:05:14","date_gmt":"2025-04-08T19:05:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0"},"modified":"2025-04-08T21:05:14","modified_gmt":"2025-04-08T19:05:14","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","title":{"rendered":"\u00cbsht\u00eb publikuar versioni 3.5.0 i bibliotek\u00ebs criptografike OpenSSL","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb l\u00ebshuar biblioteka OpenSSL 3.5.0 me implementimin e protokolleve SSL\/TLS dhe algoritmeve t\u00eb ndrysh\u00ebm t\u00eb enkriptimit. OpenSSL 3.5 \u00ebsht\u00eb e klasifikuar si nj\u00eb l\u00ebshim me mb\u00ebshtetje afatgjat\u00eb (LTS), p\u00ebrmir\u00ebsimet e t\u00eb cilit l\u00ebshohen p\u00ebr 5 vjet (deri n\u00eb prill 2030). Mb\u00ebshtetje p\u00ebr deg\u00ebt e m\u00ebparshme OpenSSL 3.3, 3.2 dhe 3.0 LTS do t\u00eb vazhdoj\u00eb deri n\u00eb prill 2026, n\u00ebntor 2025 dhe shtator 2026 p\u00ebrkat\u00ebsisht. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
ML-KEM (CRYSTALS-Kyber) \u2014 algoritmi i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsve, q\u00eb p\u00ebrdor metoda kriptografie t\u00eb bazuara n\u00eb zgjidhjen e problemeve t\u00eb teoris\u00eb s\u00eb rrjetave, koha e zgjidhjes s\u00eb t\u00eb cilave nuk ndryshon n\u00eb kompjuter\u00ebt e zakonsh\u00ebm dhe ata kuant\u00eb.\n
ML-DSA (CRYSTALS-Dilithium) \u2014 algoritmi i formimit t\u00eb n\u00ebnshkrimeve digjitale, i cili bazohet n\u00eb teorin\u00eb e rrjetave.\n
SLH-DSA (Sphincs+) \u2014 algoritmi i formimit t\u00eb n\u00ebnshkrimeve digjitale, q\u00eb p\u00ebrdor metoda kriptografike t\u00eb bazuara n\u00eb funksione hash. SLH-DSA \u00ebsht\u00eb pas ML-DSA n\u00eb madh\u00ebsin\u00eb e n\u00ebnshkrimeve dhe shpejt\u00ebsin\u00eb e funksionimit, por bazohet n\u00eb principe t\u00eb ndryshme matematikore, pra do t\u00eb mbetet efektiv n\u00eb rastin e komprometimit t\u00eb algoritmeve t\u00eb bazuara n\u00eb teorin\u00eb e rrjetave. <\/ul>\n
\u00cbsht\u00eb realizuar mb\u00ebshtetje e plot\u00eb p\u00ebr protokollin QUIC (RFC 9000), i cili tani \u00ebsht\u00eb i disponuesh\u00ebm jo vet\u00ebm p\u00ebr aplikacionet klient, por edhe p\u00ebr ato server. QUIC \u00ebsht\u00eb nj\u00eb shtres\u00eb mbi protokollin UDP, q\u00eb mb\u00ebshtet shum\u00eb lidhje dhe ofron metoda enkriptimi t\u00eb barabarta me TLS. Protokolli QUIC p\u00ebrdoret n\u00eb HTTP\/3 dhe u krijua si nj\u00eb alternativ\u00eb ndaj kombinimit TCP+TLS, zgjidh probleme me koh\u00ebn e gjat\u00eb t\u00eb vendosjes dhe negociatave t\u00eb lidhjeve n\u00eb TCP, si dhe eliminon vonesat n\u00eb rast t\u00eb humbjes s\u00eb paketave gjat\u00eb transfert\u00ebs s\u00eb t\u00eb dh\u00ebnave.\n
\u00cbsht\u00eb shtuar mund\u00ebsia p\u00ebr p\u00ebrdorimin e grupeve t\u00eb jashtme me implementimin e protokollit QUIC, p\u00ebrfshir\u00eb grupet q\u00eb mb\u00ebshtesin modin 0-RTT (0 Round Trip Time), q\u00eb lejon q\u00eb t\u00eb nisim menj\u00ebher\u00eb transfert\u00ebn e t\u00eb dh\u00ebnave pas d\u00ebrgimit t\u00eb paket\u00ebs p\u00ebr t\u00eb vendosur lidhjen.\n
\u00c8sht\u00eb shtuar mb\u00ebshtetje p\u00ebr objektet e pambrojtura (opaque) t\u00eb \u00e7el\u00ebsave simetrik\u00eb (EVP_SKEY), q\u00eb fshehin detajet e implementimit t\u00eb \u00e7el\u00ebsit.\n
\u00cbsht\u00eb shtuar parametri \u00abenable-fips-jitter\u00bb, q\u00eb p\u00ebrfshin n\u00eb ofruesin FIPS p\u00ebrdorimin e nj\u00eb burimi entropie t\u00eb bazuar n\u00eb jitter, i implementuar me bibliotek\u00ebn jitterentropy. Formimi i entropis\u00eb n\u00eb baz\u00eb t\u00eb jitterit b\u00ebhet duke masur ndryshimet n\u00eb koh\u00ebn e rikthimit t\u00eb nj\u00eb seti t\u00eb caktuar instrukcionesh n\u00eb CPU, i cili varet nga shum\u00eb faktor\u00eb t\u00eb brendsh\u00ebm dhe \u00ebsht\u00eb i pap\u00ebrcaktuesh\u00ebm pa kontroll fizik mbi CPU.\n
N\u00eb CMP (Protocoli i Menaxhimit t\u00eb Certifikatave) \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr gjenerimin e centralizuar t\u00eb \u00e7el\u00ebsave (\u00e7el\u00ebsi publik dhe privat p\u00ebr klientin gjenerohen nga ana e server<\/a>).\n