I-LibreSSL 3.0.0 Ukukhishwa Kwelabhulali Ye-Cryptographic

I-OpenBSD Project Developers kwethulwe ukukhishwa kwe-edishini ephathekayo yephakheji I-LibreSSL 3.0.0, lapho kuthuthukiswa khona imfoloko ye-OpenSSL, okuhloswe ngayo ukunikeza izinga eliphezulu lokuphepha. Iphrojekthi ye-LibreSSL igxile ekusekelweni kwekhwalithi ephezulu kwezivumelwano ze-SSL/TLS ngokususa ukusebenza okungadingekile, ukwengeza izici zokuphepha ezengeziwe, nokuhlanza ngokuphawulekayo nokusebenza kabusha isisekelo sekhodi. Ukukhishwa kwe-LibreSSL 3.0.0 kuthathwa njengokukhishwa kokuhlola okuthuthukisa izici ezizofakwa ku-OpenBSD 6.6. Ushintsho olubalulekile lwenombolo yenguqulo kungenxa yokusetshenziswa kwezinombolo zamadesimali (ngemuva kokuthi 2.9 kuza inguqulo 3.0).

Izici ze-LibreSSL 3.0.0:

  • Ukuthuthwa okuqediwe kusuka kuhlaka lwe-OpenSSL 1.1 RSA_METHOD, okuvumela ukuthi usebenzise ukuqaliswa okuhlukahlukene kwemisebenzi yokusebenza ne-RSA;
  • Amadokhumenti abuyekeziwe ukuze abonise izinketho ezingachazwanga ngaphambili futhi asuse izinketho ezingasebenzi;
  • Izinkinga ezilungisiwe ezikhonjwe njengomphumela wokuhlola ngethuluzi le-oss-fuzz;
  • Kuxazululwe ukuvuza kwemininingwane ehlukahlukene kusetshenziswa iziteshi zezinkampani zangaphandle ekusetshenzisweni kwe-DSA kanye ne-ECDSA;
  • Ku-Windows platform, umyalo "wesivinini" unikwe amandla ku-openssl utility futhi ukulungiselelwa kokusebenza kwenziwe lapho kwakhiwa ku-Visual Studio.

Source: opennet.ru

Engeza amazwana