News: 0001626819

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

OpenSSL 4.0 Released With Encrypted Client Hello, RFC 8998 Support

([Free Software] 3 Hours Ago OpenSSL 4.0)


OpenSSL 4.0 was just released as a big update for this widely-used SSL/TLS and crypto library.

OpenSSL 4.0 delivers better privacy with Encrypted Client Hello (ECH) support to encrypt the initial TLS handshake and hide the Server Name Indication. OpenSSL 4.0 also drops legacy SSLv3 and other old protocol/engine support, improves post-quantum cryptography support with RFC 8998 support, ML-DSA-MU, and tls-hybrid-sm2-mlkem post-quantum group.

OpenSSL 4.0 also makes use of the major version bump to introduce other incompatible changes like removing SSLv2 Client Hello and dropping support for engines as well as removing the Darwin i386 and PowerPC/PPC64 targets.

More details on the OpenSSL 4.0 release via [1]GitHub .



[1] https://github.com/openssl/openssl/releases/tag/openssl-4.0.0



Far out in the uncharted backwaters of the unfashionable end of the
Western Spiral arm of the Galaxy lies a small unregarded yellow sun.
Orbiting this at a distance of roughly ninety-eight million miles is an
utterly insignificant little blue-green planet whose ape-descended life
forms are so amazingly primitive that they still think digital watches
are a pretty neat idea ...
-- Douglas Adams, "The Hitchhiker's Guide to the Galaxy"