ื ืึธื ืึท ืืึธืจ ืืื ืึท ืืึทืื ืคืื ืึทื ืืืืืงืืื ื, ืื OpenSSL 3.1.0 ืืืืืืึธืืขืง ืืื ืืืคืจืืื ืืื ืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืื SSL / TLS ืคึผืจืึธืืึธืงืึธืืก ืืื ืคืึทืจืฉืืื ืขื ืงืจืืคึผืฉืึทื ืึทืืืขืจืืืึทืื. OpenSSL 3.1 ืืืขื ืืืื ืืขืฉืืืฆื ืืื ืืขืจืฅ 2025. ืฉืืืฆื ืคึฟืึทืจ ืคืึทืจืืึทื ืืขื ืืืื ืฆืืืืืื ืคืื OpenSSL 3.0 ืืื 1.1.1 ืืืขื ืคืึธืจืืขืฆื ืืื ืกืขืคืืขืืืขืจ 2026 ืืื ืกืขืคืืขืืืขืจ 2023, ืจืืกืคึผืขืงืืืืืื. ืื ืคึผืจืืืขืงื ืงืึธื ืืื ืคืื ืื ืืขืจืืขืืืืื ืืื ืืขืจ ืื Apache 2.0 ืืขืจืืืืืขื ืืฉ.
ืืืืคึผื ืื ืึธืืืืืืฉืึทื ื ืคืื OpenSSL 3.1.0:
- ืื FIPS ืืึธืืืืข ืฉืืืฆื ืงืจืืคึผืืึธืืจืึทืคืืง ืึทืืืขืจืืืึทืื ืืืึธืก ื ืึธืืงืืืขื ืืื ืื FIPS 140-3 ืืืืขืจืืืื ื ืึธืจืืึทื. ืืขืจ ืืึธืืืืข ืกืขืจืืึทืคืึทืงืืืฉืึทื ืคึผืจืึธืฆืขืก ืืื ืื ืืขืืืืื ืฆื ืงืจืืื ืึท ืืึทืืืืึทืื ืคืื ืืขืกืงืขื ืืื FIPS 140-3 ืจืขืงืืืืจืขืืขื ืฅ. ืืื ืกืขืจืืึทืคืึทืงืืืฉืึทื ืืื ืืึทื ืฅ, ื ืึธื ืึทืคึผืืืืืื ื OpenSSL ืฆื ืฆืืืืึทื 3.1, ื ืืฆืขืจืก ืงืขื ืขื ืคืึธืจืืขืฆื ืฆื ื ืืฆื ืึท FIPS ืืึธืืืืข ืืืึธืก ืืื ืกืขืจืืึทืคืืื ืฆื FIPS 140-2. ืฆืืืืฉื ืื ืขื ืืขืจืื ืืขื ืืื ืื ื ืืึทืข ืืืขืจืกืืข ืคืื โโืื ืืึธืืืืข, ืื ืื ืงืืืืฉืึทื ืคืื ืื ืืจืืคึผืืข DES ECB, Triple DES CBC ืืื EdDSA ืึทืืืขืจืืืึทืื, ืืืึธืก ืืขื ืขื ื ืึธื ื ืืฉื ืืขืกืืขื ืคึฟืึทืจ ืืขืกืงืขื ืืื FIPS ืจืขืงืืืืจืขืืขื ืฅ. ืื ื ืืึทืข ืืืขืจืกืืข ืืืื ืืืื ืึทืคึผืืึทืืึทืืืืฉืึทื ื ืฆื ืคึฟืึทืจืืขืกืขืจื ืคืึธืจืฉืืขืืื ื ืืื ืึท ืืืขืจืืึทื ื ืฆื ืคืืืกื ืืืง ืื ืขืจืืขื ืืขืกืฅ ืืขืืขืจ ืืึธื ืืืขื ืื ืืึธืืืืข ืืื ืืึธืืืื, ืืื ื ืื ื ืึธืจ ื ืึธื ืื ืกืืึทืืืจืื ื.
- OSSL_LIB_CTX ืงืึธื ืืื ืจืืืืขืจืงื. ืื ื ืืึทืข ืึธืคึผืฆืืข ืืืืืึทื ืืืฅ ืืื ืืืืืง ืืืึทืงืื ื ืืื ืึทืืึทืื ืืขืืขืจ ืคืึธืจืฉืืขืืื ื.
- ืืืคึผืจืืืื ืคืึธืจืฉืืขืืื ื ืคืื ืื ืขื ืงืึธืืขืจ ืืื ืืืงืึธืืืขืจ ืคืจืึทืืขืืืึธืจืงืก.
- ืคืึธืจืฉืืขืืื ื ืึทืคึผืืึทืืึทืืืืฉืึทื ืฉืืึทืืืช ืฆื ืื ื ืืฆื ืคืื ืื ืขืจืืขื ืกืืจืึทืงืืฉืขืจื (ืืึทืฉ ืืืฉื) ืืื ืงืึทืืฉืื ื ืืื ืืืจืืืขืงืึธืื.
- ืื ืืืืงืืึทื ืคืื ืืืฉืขื ืขืจืืืืื ื RSA ืฉืืืกืืขื ืืื FIPS ืืึธืืข ืืื ืืขืืืืงืกื.
- ืคึฟืึทืจ ืคืึทืจืฉืืื ืคึผืจืึทืกืขืกืขืจ ืึทืจืงืึทืืขืงืืฉืขืจื, ืกืคึผืขืฆืืคืืฉ ืคึฟืึทืจืืึทืืืื ื ืึธืคึผืืืืืืึทืืืึธื ืก ืืขื ืขื ืืึทืงืขื ืขื ืืื ืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืื ืึทืืืขืจืืืึทืื ืคืื AES-GCM, ChaCha20, SM3, SM4 ืืื SM4-GCM. ืืืฉื, AES-GCM ืงืึธื ืืื ืึทืงืกืขืืขืจืืืืื ืืื ืื AVX512 vAES ืืื vPCLMULQDQ ืื ืกืืจืึทืงืฉืึทื ื.
- KBKDF (Key Based Key Derivation Function) ืืืฆื ืฉืืืฆื ืื KMAC (KECCAK Message Authentication Code) ืึทืืืขืจืืืึทื.
- ืคืึทืจืฉืืื "OBJ_*" ืคืึทื ืืงืฉืึทื ื ืืขื ืขื ืฆืืืขืคืืกื ืคึฟืึทืจ ื ืืฆื ืืื ืืืืื-ืืจืขืืื ืงืึธื.
- ืฆืืืขืืืืื ืื ืคืืืืงืืื ืฆื ื ืืฆื ืื RNDR ืืืืขื ืืื RNDRRS ืจืขืืืฉืืกืืขืจื, ืื ืืืฆื ืืื ืคึผืจืึทืกืขืกืขืจื ืืืืืจื ืืืืฃ ืื AArch64 ืึทืจืงืึทืืขืงืืฉืขืจ, ืฆื ืืืฉืขื ืขืจืืื ืคึผืกืขืืืึธืจืึทื ืืึธื ื ืืืขืจื.
- ืื ืคืึทื ืืงืฉืึทื ื OPENSSL_LH_stats, OPENSSL_LH_node_stats, OPENSSL_LH_node_usage_stats, OPENSSL_LH_stats_bio, OPENSSL_LH_node_stats_bio ืืื OPENSSL_LH_node_usage_stats_bio ืืขื ืขื ืืืคึผืจืืฉืืืืืื. ืื DEFINE_LHASH_OF ืืึทืงืจืึธื ืืื ืืืคึผืจืืฉืืืืืื.
ืืงืืจ: opennet.ru