LibreSSL 2.9.1 Phatlalatso ea Laeborari ea Cryptographic

Baetsi ba Morero oa OpenBSD hlahisoa ho lokolloa ha khatiso e nkehang ea sephutheloana LibreSSL 2.9.1, moo fereko ea OpenSSL e ntseng e ntlafatsoa, ​​e reretsoeng ho fana ka boemo bo phahameng ba tšireletso. Morero oa LibreSSL o shebane le ts'ehetso ea boleng bo holimo bakeng sa liprothokholo tsa SSL / TLS ka ho tlosa ts'ebetso e sa hlokahaleng, ho eketsa likarolo tse ling tsa ts'ireletso, le ho hloekisa haholo le ho tsosolosa motheo oa khoutu. Tokollo ea LibreSSL 2.9.1 e nkuoa e le tokollo ea liteko e hlahisang likarolo tse tla kenyelletsoa ho OpenBSD 6.5.

Liphetoho ho LibreSSL 2.9.1:

  • Ts'ebetso ea SM3 e ekelitsoeng ea hash (Sechaena standard GB/T 32905-2016);
  • E kentse SM4 block cipher (Sechaena standard GB/T 32907-2016);
  • E kentse macros OPENSSL_NO_* ho ntlafatsa tšebelisano le OpenSSL;
  • Mokhoa oa EC_KEY_METHOD o kentsoe ka mokhoa o itseng ho tsoa ho OpenSSL;
  • E kentsoe mehala e sieo ea OpenSSL 1.1 API;
  • Tšehetso e ekelitsoeng bakeng sa XChaCha20 le XChaCha20-Poly1305;
  • Tšehetso e ekelitsoeng bakeng sa ho fetisetsa linotlolo tsa AES ka sebopeho sa EVP;
  • E fane ka ho qala ka mokhoa o itekanetseng oa CRYPTO_LOCK;
  • Ho ntlafatsa tšebelisano le OpenSSL, ts'ehetso ea pbkdf2 key hashing scheme e kentsoe ts'ebelisong ea openssl; ka ho sa feleng, litaelo tsa enc, crl, x509 le dgst li sebelisa mokhoa oa sha25 hashing;
  • Liteko tse kentsoeng ho lekola ho khoneha lipakeng tsa LibreSSL le OpenSSL
    1.0 / 1.1;

  • E ekelitse liteko tse ling tsa Wycheproof;
  • E ekelitse bokhoni ba ho sebelisa algorithm ea RSA PSS bakeng sa li-signature tsa dijithale ha ho buisanoa ka likhokahano (ho ts'oarana ka letsoho);
  • Ts'ebetsong e ekelitsoeng ea mochini oa mmuso bakeng sa ho ts'oarana ka letsoho, o hlalositsoeng ho RFC-8446;
  • E tlositse lefa la ASN.1 khoutu e amanang le libcrypto e sa kang ea sebelisoa ka lilemo tse ka bang 20;
  • Ntlafatso ea kopano e ekelitsoeng bakeng sa litsamaiso tsa 32-bit ARM le Mingw-w64;
  • Tšebelisano e ntlafalitsoeng le sethala sa Android.

Source: opennet.ru

Eketsa ka tlhaloso