ืžืขืœื“ื•ื ื’ ืคื•ืŸ LibreSSL 3.1.0 ืื•ืŸ Botan 2.14.0 ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ื‘ื™ื‘ืœื™ืึธื˜ืขืง

OpenBSD ืคึผืจืึธื™ืขืงื˜ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื“ืขืจืœืื ื’ื˜ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืึท ืคึผืึธืจื˜ืึทื˜ื™ื•ื• ืึทื“ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ืคึผืขืงืœ LibreSSL 3.1.0, ืื™ืŸ ื•ื•ืึธืก ืึท ื’ืึธืคึผืœ ืคื•ืŸ OpenSSL ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผืขื“, ืึทื™ืžืขื“ ืฆื• ืฆื•ืฉื˜ืขืœืŸ ืึท ื”ืขื›ืขืจ ืžื“ืจื’ื” ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜. ื“ื™ LibreSSL ืคึผืจื•ื™ืขืงื˜ ืื™ื– ืคืึธื•ืงื™ืกื˜ ืื•ื™ืฃ ื”ื•ื™ืš-ืงื•ื•ืึทืœื™ื˜ืขื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ SSL / TLS ืคึผืจืึธื˜ืึธืงืึธืœืก ื“ื•ืจืš ืจื™ืžื•ื•ื•ื™ื ื’ ื•ืžื ื™ื™ื˜ื™ืง ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™, ืึทื“ื™ื ื’ ื ืึธืš ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืื•ืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืจื™ื™ื ื™ืงื•ื ื’ ืื•ืŸ ืจื™ื•ื•ืขืจืงื™ื ื’ ื“ื™ ืงืึธื“ ื‘ืึทื–ืข. ื“ื™ LibreSSL 3.1.0 ืžืขืœื“ื•ื ื’ ืื™ื– ื’ืขืจืขื›ื ื˜ ื•ื•ื™ ืึทืŸ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ืžืขืœื“ื•ื ื’ ื•ื•ืึธืก ื“ืขื•ื•ืขืœืึธืคึผืก ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ OpenBSD 6.7.

ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ LibreSSL 3.1.0:

  • ืึทืŸ ืขืจืฉื˜ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ TLS 1.3 ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืึท ื ื™ื™ึทืข ืฉื˜ืึทื˜ ืžืึทืฉื™ืŸ ืื•ืŸ ืึท ืกืึทื‘ืกื™ืกื˜ืขื ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืจืขืงืึธืจื“ืก. ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ื‘ืœื•ื™ื– ื“ืขืจ ืงืœื™ืขื ื˜ ื˜ื™ื™ืœ ืคื•ืŸ TLS 1.3 ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืคึฟืึทืจ ืื™ืฆื˜; ื“ื™ ืกืขืจื•ื•ืขืจ ื˜ื™ื™ืœ ืื™ื– ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื™ืŸ ืึท ืฆื•ืงื•ื ืคึฟื˜ ืžืขืœื“ื•ื ื’.
  • ื“ืขืจ ืงืึธื“ ืื™ื– ืงืœื™ื ื“, ืคึผืจืึธื˜ืึธืงืึธืœ ืคึผืึทืจืกื™ื ื’ ืื•ืŸ ื–ื›ึผืจื•ืŸ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ื–ืขื ืขืŸ ื™ืžืคึผืจื•ื•ื•ื“.
  • ื“ื™ RSA-PSS ืื•ืŸ RSA-OAEP ืžืขื˜ื”ืึธื“ืก ื–ืขื ืขืŸ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืคื•ืŸ OpenSSL 1.1.1.
  • ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืคื•ืŸ OpenSSL 1.1.1 ืื•ืŸ ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืงืžืก (ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืžืขืกืขื“ื–ืฉ ืกื™ื ื˜ืึทืงืก). ื“ื™ "cms" ื‘ืึทืคึฟืขืœ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ openssl ื ื•ืฆืŸ.
  • ื™ืžืคึผืจื•ื•ื•ื“ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ OpenSSL 1.1.1 ื“ื•ืจืš ื‘ืึทืงืคึผืึธืจื˜ ืขื˜ืœืขื›ืข ืขื ื“ืขืจื•ื ื’ืขืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืึท ื’ืจื•ื™ืก ื’ืึทื ื’ ืคื•ืŸ ื ื™ื™ึท ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืคื•ื ืงืฆื™ืข ื˜ืขืกืฅ.
  • ื“ื™ ื ืึทื˜ื•ืจ ืคื•ืŸ EVP_chacha20 () ืื™ื– ื ืึธืขื ื˜ ืฆื• ื“ื™ ืกืขืžืึทื ื˜ื™ืงืก ืคื•ืŸ OpenSSL.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ ืึธืจื˜ ืคื•ืŸ ืึท ืกื›ื•ื ืžื™ื˜ ืกืขืจื˜ืึทืคืึทืงื™ื™ืฉืึทืŸ ืื•ื™ื˜ืึธืจื™ื˜ืขื˜ ืกืขืจื˜ื™ืคื™ืงืึทืฅ.
  • ืื™ืŸ ื“ื™ ืึธืคึผืขื ืกืกืœ ื ื•ืฆืŸ, ื“ื™ "req" ื‘ืึทืคึฟืขืœ ื™ืžืคึผืœืึทืžืึทื ืฅ ื“ื™ "-addext" ืึธืคึผืฆื™ืข.

ืื™ืŸ ื“ืขืจืฆื•, ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืืžืขืจืงื˜ ืžืขืœื“ื•ื ื’ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฉื˜ื™ื•ื•ืœ 2.14.0, ื’ืขื ื™ืฆื˜ ืื™ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜ NeoPG, ืึท ื’ืึธืคึผืœ ืคื•ืŸ GnuPG 2. ื“ื™ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ื’ื™ื˜ ืึท ื’ืจื•ื™ืก ื–ืึทืžืœื•ื ื’ ืคืึทืจื˜ื™ืง ืคึผืจื™ืžื™ื˜ื™ื•ื•ื–, ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ื“ื™ TLS ืคึผืจืึธื˜ืึธืงืึธืœ, X.509 ืกืขืจื˜ื™ืคื™ืงืึทืฅ, AEAD ืกื™ืคืขืจืก, ื˜ืคึผืžืก, PKCS #11, ืคึผืึทืจืึธืœ ื›ืึทืฉื™ื ื’ ืื•ืŸ ืคึผืึธืกื˜-ืงื•ื•ืึทื ื˜ื•ื ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ (ื”ืึทืฉ-ื‘ืื–ื™ืจื˜ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื•ืŸ ืฉืœื™ืกืœ ื”ืขืกืงืขื ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ McEliece ืื•ืŸ NewHope). ื“ื™ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ C++11 ืื•ืŸ ืฆื•ืฉื˜ืขืœืŸ ืื•ื ื˜ืขืจ ื“ื™ BSD ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ.

ืฆื•ื•ื™ืฉืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื“ื™ ื ื™ื™ืข ื ื•ืžืขืจ ืคื•ืŸ Botan:

  • ืžื•ืกื™ืฃ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืžืึธื“ืข ื’ืงื (ื’ืึทืœืึธื™ืก / ืงืึธื•ื ื˜ืขืจ ืžืึธื“ืข), ืึทืงืกืขืœืขืจื™ื™ื˜ื™ื“ ืคึฟืึทืจ POWER8 ืคึผืจืึทืกืขืกืขืจื– ื ื™ืฆืŸ ื“ื™ VPSUMD ื•ื•ืขืงื˜ืึธืจ ืœื™ืžืขื“.
  • ืคึฟืึทืจ ARM ืื•ืŸ POWER ืกื™ืกื˜ืขืžืขืŸ, ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืขืงื˜ืึธืจ ืคึผืขืจืžื™ื•ื˜ื™ื™ืฉืึทืŸ ืึธืคึผืขืจืึทืฆื™ืข ืคึฟืึทืจ AES ืžื™ื˜ ืงืขืกื™ื™ื“ืขืจื“ื™ืง ื“ื•ืจื›ืคื™ืจื•ื ื’ ืฆื™ื™ื˜ ืื™ื– ื‘ืื˜ื™ื™ื˜ื™ืง ืึทืงืกืขืœืขืจื™ื™ื˜ื™ื“.
  • ื ื ื™ื™ึทืข ืžืึธื“ื•ืœืึธ ื™ื ื•ื•ืขืจื–ืฉืึทืŸ ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜, ื•ื•ืึธืก ืื™ื– ืคืึทืกื˜ืขืจ ืื•ืŸ ื‘ืขืกืขืจ ืคึผืจืึทื˜ืขืงืฅ ืงืขื’ืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืื ืคืืœืŸ.
  • ืึธืคึผื˜ื™ืžื™ื–ืึทื˜ื™ืึธื ืก ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืฆื• ืคืึทืจื’ื™ื›ืขืจืŸ ECDSA / ECDH ื“ื•ืจืš ืจื™ื“ื•ืกื™ื ื’ ื“ื™ NIST ืคืขืœื“.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’