{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"L\u00ebshimi i bibliotek\u00ebs kriptografike OpenSSL 4.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
U publikua biblioteka OpenSSL 4.0.0, e cila ofron implementimin e protokolleve TLS dhe algoritmeve t\u00eb ndrysh\u00ebm t\u00eb enkriptimit. OpenSSL 4.0 \u00ebsht\u00eb klasifikuar si nj\u00eb version me mb\u00ebshtetje t\u00eb zakonshme, ku p\u00ebrdit\u00ebsimet publikohen p\u00ebr nj\u00eb periudh\u00eb prej 13 muajsh. Mb\u00ebshtetje p\u00ebr deget e m\u00ebparshme OpenSSL 3.6, 3.5 LTS, 3.4 dhe 3.0 LTS do t\u00eb vazhdoj\u00eb deri n\u00eb n\u00ebntor 2026, prill 2030, tetor 2026 dhe shtator 2026 p\u00ebrkat\u00ebsisht. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
Novitetet kryesore: <\/p>\n
\n
Shtuar mb\u00ebshtetje p\u00ebr zgjerimin TLS ECH (Encrypted ClientHello, RFC 9849), i cili \u00ebsht\u00eb i dizajnuar p\u00ebr t\u00eb enkriptuar informacionin mbi parametrit e seancave TLS, si\u00e7 \u00ebsht\u00eb emri i k\u00ebrkuar i domain-it. Ndryshe nga zgjerimi ESNI (Encrypted Server Name Indication), n\u00eb ECH nuk enkriptohen vet\u00ebm fushat e ve\u00e7anta, por e t\u00ebr\u00eb mesazhi TLS ClientHello enkriptohet, gj\u00eb q\u00eb lejon bllokimin e rrjedhjeve p\u00ebrmes fushave q\u00eb nuk mbulohen nga ESNI, si p\u00ebr shembull fusha PSK (Pre-Shared Key).\n
Shtuar mb\u00ebshtetje p\u00ebr algoritme t\u00eb caktuara n\u00eb RFC 8998 q\u00eb p\u00ebrdorin nj\u00eb grup standardizimi t\u00eb algoritmeve t\u00eb kriptografis\u00eb SM2 t\u00eb miratuar n\u00eb Kin\u00eb: algoritmi i krijimit t\u00eb n\u00ebnshkrimit digjital sm2sig_sm3, grupi i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave curveSM2 dhe grupi post-kvantar curveSM2MLKEM768.\n
Shtuar funksioni kriptografik i heshit cSHAKE, i bazuar n\u00eb algoritmin SHA-3, i cili lejon krijimin e hash-eve t\u00eb ndryshme mbi t\u00eb nj\u00ebjtat t\u00eb dh\u00ebna hyr\u00ebse p\u00ebr t\u00eb parandaluar sulmet q\u00eb manipullojn\u00eb riciklimin e t\u00eb dh\u00ebnave.\n
\u00cbsht\u00eb shtuar algoritmi hibrid \u00abML-DSA-MU\u00bb, i cili kombinon algoritmin post-kantor p\u00ebr formimin e n\u00ebnshkrimit digjital ML-DSA (CRYSTALS-Dilithium) me funksionin klasik t\u00eb hash SHAKE256.\n
Shtuar mb\u00ebshtetje p\u00ebr funksionet e krijimit t\u00eb \u00e7el\u00ebsave SNMP KDF t\u00eb bazuara n\u00eb HMAC-SHA dhe SRTP KDF t\u00eb bazuara n\u00eb AES-CM, t\u00eb cilat p\u00ebrdoren n\u00eb protokollat rrjetore SNMPv3 dhe SRTP p\u00ebr krijimin e \u00e7el\u00ebsave kriptografik\u00eb.\n
P\u00ebr platform\u00ebn Windows \u00ebsht\u00eb realizuar mb\u00ebshtetje p\u00ebr p\u00ebrdorimin e lidhjes statike ose dinamike me Visual C++ Runtime.\n
\u00cbsht\u00eb ndalur mb\u00ebshtetja p\u00ebr SSLv3 dhe SSLv2 Client Hello.\n
\u00cbsht\u00eb hequr mb\u00ebshtetja p\u00ebr motor\u00ebt e ngarkuesh\u00ebm dinamikisht, n\u00eb vend t\u00eb t\u00eb cil\u00ebve p\u00ebr t'u zgjeruar funksionaliteti i OpenSSL duhet t\u00eb p\u00ebrdoret koncepti i ofruesve t\u00eb t\u00ebrheqsh\u00ebm.\n