{"id":123436,"date":"2025-04-08T21:05:14","date_gmt":"2025-04-08T19:05:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0"},"modified":"2025-04-08T21:05:14","modified_gmt":"2025-04-08T19:05:14","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-5-0","title":{"rendered":"Publikohet biblioteka kriptografike OpenSSL 3.5.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
U publikua biblioteka OpenSSL 3.5.0 me implementimin e protokolleve SSL\/TLS dhe algoritme t\u00eb ndryshme t\u00eb enkriptimit. OpenSSL 3.5 ka qen\u00eb i klasifikuar si nj\u00eb version me mb\u00ebshtetje afatgjat\u00eb (LTS), p\u00ebrmir\u00ebsimet e t\u00eb cilit l\u00ebshohen p\u00ebr nj\u00eb periudh\u00eb prej 5 vjet\u00ebsh (deri n\u00eb prill 2030). Mb\u00ebshtetje p\u00ebr deg\u00ebt e kaluara t\u00eb OpenSSL 3.3, 3.2 dhe 3.0 LTS do t\u00eb vazhdoj\u00eb deri n\u00eb prill 2026, n\u00ebntor 2025 dhe shtator 2026 p\u00ebrkat\u00ebsisht. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
ML-KEM (CRYSTALS-Kyber) \u2014 algoritmi i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave, i cili p\u00ebrdor metoda kriptografie t\u00eb bazuara n\u00eb zgjidhjen e problemeve t\u00eb teoris\u00eb s\u00eb rrjetave, koha e zgjidhjes s\u00eb t\u00eb cil\u00ebve nuk ndryshon midis kompjuter\u00ebve t\u00eb zakonsh\u00ebm dhe atyre kuantik\u00eb.\n
ML-DSA (CRYSTALS-Dilithium) \u2014 algoritmi i formimit t\u00eb n\u00ebnshkrimeve dixhitale, i cili bazohet n\u00eb teorin\u00eb e rrjetave.\n
SLH-DSA (Sphincs+) \u2014 algoritmi i formimit t\u00eb n\u00ebnshkrimeve dixhitale, q\u00eb aplikon metoda kriptografie t\u00eb bazuara n\u00eb funksione hash. SLH-DSA \u00ebsht\u00eb m\u00eb i ngadalsh\u00ebm se ML-DSA n\u00eb lidhje me madh\u00ebsin\u00eb e n\u00ebnshkrimeve dhe shpejt\u00ebsin\u00eb e pun\u00ebs, por bazohet n\u00eb parime matematikore t\u00ebr\u00ebsisht t\u00eb ndryshme, q\u00eb do ta b\u00ebjn\u00eb at\u00eb efektiv n\u00eb rastin e kompromitimit t\u00eb algoritmeve t\u00eb bazuara n\u00eb teorin\u00eb e rrjetave. <\/ul>\n
Implementuar mb\u00ebshtetje t\u00eb plot\u00eb p\u00ebr protokollin QUIC (RFC 9000), i cili tani \u00ebsht\u00eb i disponuesh\u00ebm jo vet\u00ebm p\u00ebr aplikacionet klient, por edhe p\u00ebr ato server. QUIC \u00ebsht\u00eb nj\u00eb shtes\u00eb mbi protokollin UDP, mb\u00ebshtet shum\u00eb lidhje dhe ofron metoda enkriptimi q\u00eb jan\u00eb ekuivalente me TLS. Protokolli QUIC p\u00ebrdoret n\u00eb HTTP\/3 dhe \u00ebsht\u00eb krijuar si nj\u00eb alternativ\u00eb ndaj paket\u00ebs TCP+TLS, duke zgjidhur problemet me koh\u00ebn e gjat\u00eb t\u00eb vendosjes dhe pajtimit t\u00eb lidhjeve n\u00eb TCP, si dhe duke eliminuar vonesat n\u00eb rast t\u00eb humbjes s\u00eb paketave gjat\u00eb kalimit t\u00eb t\u00eb dh\u00ebnave.\n
Shtuar mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb stek\u00ebve t\u00eb jashtme me implementimin e protokollit QUIC, duke p\u00ebrfshir\u00eb stek\u00ebt q\u00eb mb\u00ebshtesin modalitetin 0-RTT (0 Round Trip Time), duke lejuar fillimin e menj\u00ebhersh\u00ebm t\u00eb kalimit t\u00eb t\u00eb dh\u00ebnave pas d\u00ebrgimit t\u00eb paket\u00ebs p\u00ebrvendosjen e lidhjes.\n
Shtuar parametri \u00abenable-fips-jitter\u00bb, i cili aktivizon n\u00eb ofruesin FIPS p\u00ebrdorimin e nj\u00eb burimi entropie t\u00eb bazuar n\u00eb jitter, i realizuar me bibliotek\u00ebn jitterentropy. Formimi i entropis\u00eb n\u00eb baz\u00eb t\u00eb jitter-it b\u00ebhet duke matur ndryshimet n\u00eb koh\u00ebn e rip\u00ebrs\u00ebritjes s\u00eb nj\u00eb grupi t\u00eb caktuar instrukcionesh n\u00eb CPU, i cili varet nga shum\u00eb faktor\u00eb t\u00eb brendsh\u00ebm dhe \u00ebsht\u00eb i paparashikuesh\u00ebm pa kontroll fizik mbi CPU.\n
N\u00eb CMP (Protocoli i Menaxhimit t\u00eb Certifikatave) \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr gjenerimin qendror t\u00eb \u00e7elusheve (\u00e7el\u00ebsi publik dhe privat p\u00ebr klientin gjenerohen n\u00eb an\u00ebn e serverit) server\u00eb<\/a>).\n