https://cybertoolchain.io/tools/openssl New releases and features in OpenSSL, tracked by The Cyber Toolchain. en Fri, 23 Oct 2026 12:23:31 GMT https://github.com/openssl/openssl/releases/tag/openssl-4.1.0 https://github.com/openssl/openssl/releases/tag/openssl-4.1.0 Fri, 23 Oct 2026 12:23:31 GMT OpenSSL 4.1.0 adds DTLS 1.3, GREASE, IKEV2 KDF, DTLS listener API support, and post-quantum crypto performance boosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DTLS 1.3 support per RFC 9147, documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `no-ecdsa` and `no-ecdh` removal from `Configure` — use `no-ec` to disable elliptic curve support. • Adds RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) support. • Adds optimized ML-DSA and ML-KEM NTT operations on `ppc64le`; optimized ML-DSA operations on `x86_64` including AVX-512-optimized SHAKE x4 for ML-DSA and AVX-512/VAES optimizations for AES-CBC decryption. • Adds initial support for the Elbrus2000 (`e2k`) architecture. • Adds `VC-WIN32-MSVC2013` and `VC-WIN64A-MSVC2013` build targets for MSVC 2013 C99 bridging support. Breaking changes: • The `no-ecdsa` and `no-ecdh` `Configure` options are removed; use `no-ec` to disable elliptic curve support. • The `tsget` utility now requires `Net::Curl::Easy` (from the `Net-Curl` CPAN distribution) instead of the abandoned `WWW::Curl::Easy` — install it before upgrading. • The `VC-WIN64I` (Windows-on-Itanium) and `VC-CE` (Windows CE) build targets are dropped from Configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/openssl-4.1.0 https://github.com/openssl/openssl/releases/tag/openssl-4.1.0 Fri, 23 Oct 2026 12:23:31 GMT OpenSSL 4.1.0 adds DTLS 1.3, GREASE, IKEV2 KDF, DTLS listener API support, and post-quantum crypto performance boosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DTLS 1.3 support per RFC 9147, documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `no-ecdsa` and `no-ecdh` removal from `Configure` — use `no-ec` to disable elliptic curve support. • Adds RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) support. • Adds optimized ML-DSA and ML-KEM NTT operations on `ppc64le`; optimized ML-DSA operations on `x86_64` including AVX-512-optimized SHAKE x4 for ML-DSA and AVX-512/VAES optimizations for AES-CBC decryption. • Adds initial support for the Elbrus2000 (`e2k`) architecture. • Adds `VC-WIN32-MSVC2013` and `VC-WIN64A-MSVC2013` build targets for MSVC 2013 C99 bridging support. Breaking changes: • The `no-ecdsa` and `no-ecdh` `Configure` options are removed; use `no-ec` to disable elliptic curve support. • The `tsget` utility now requires `Net::Curl::Easy` (from the `Net-Curl` CPAN distribution) instead of the abandoned `WWW::Curl::Easy` — install it before upgrading. • The `VC-WIN64I` (Windows-on-Itanium) and `VC-CE` (Windows CE) build targets are dropped from Configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 09 Jun 2026 00:00:00 GMT OpenSSL 4.0.1 fixes CVEs and regressions; introduces PSK identity length validation. • Implemented validation of the minimal length of PSK identity being of at least one byte long, as required per RFC 8446. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/openssl-4.0.0 https://github.com/openssl/openssl/releases/tag/openssl-4.0.0 Tue, 14 Apr 2026 12:55:57 GMT OpenSSL 4.0 adds Encrypted Client Hello, ML-DSA-MU, post-quantum SM2/MLKEM, cSHAKE, and FFDHE for TLS 1.2. • Supports Encrypted Client Hello (ECH, RFC 9849) to hide the SNI from passive observers. • Adds SM2/SM3 signature algorithm (`sm2sig_sm3`), key exchange group `curveSM2`, and post-quantum hybrid group `curveSM2MLKEM768` per RFC 8998. • Adds cSHAKE function support per NIST SP 800-185. • Adds `ML-DSA-MU` digest algorithm support. • Adds SNMP KDF and SRTP KDF support. • Enables deferred FIPS self-tests via the new `-defer_tests` option in `openssl fipsinstall`. • Supports negotiated FFDHE key exchange in TLS 1.2 per RFC 7919. • Supports static or dynamic VC runtime linkage on Windows. Breaking changes: • Removed support for SSLv3; any configuration relying on SSLv3 will fail. • Removed support for the SSLv2 Client Hello; clients sending SSLv2 hellos will be rejected. • Removed engine support; code using `ENGINE_*` APIs or the `no-engine` build option will break. • Removed deprecated fixed SSL/TLS version method functions (e.g., TLSv1_method()); call sites must be updated. • Removed deprecated custom `EVP_CIPHER`, `EVP_MD`, `EVP_PKEY`, and `EVP_PKEY_ASN1` methods; implementations using these will fail to compile. • Removed ERR_get_state(), ERR_remove_state(), and ERR_remove_thread_state(); `ERR_STATE` is now always opaque. • `ASN1_STRING` has been made opaque; code accessing its internals directly will break. • Numerous API function signatures now include `const` qualifiers (including X509 processing functions); code that assigned return values to non-const pointers may fail to compile. • Removed `c_rehash` script; scripts or tooling invoking `c_rehash` must be updated to use `openssl rehash`. • Removed the `msie-hack` option from `openssl ca`; configs or scripts using it will error. • Support for deprecated elliptic curves in TLS (RFC 8422) and explicit EC curves are now disabled at compile-time by default; re-enable with `enable-tls-deprecated-ec` or `enable-ec_explicit_curves`. • `libcrypto` no longer cleans up globally allocated data via atexit(); programs relying on this implicit cleanup may leak resources. • OPENSSL_cleanup() now runs in a global destructor or not at all by default; code calling it explicitly may behave differently. • Dropped `darwin-i386{,-cc}` and `darwin-ppc{,64}{,-cc}` build targets; builds for those platforms will fail. • Lower bounds checks are now enforced for `PKCS5_PBKDF2_HMAC` when using the FIPS provider; calls with out-of-bounds parameters will now return errors. • Removed BIO_f_reliable() without replacement; any code using it will fail to compile. • BIO_snprintf() now delegates to libc snprintf(); behavior differences from the former internal implementation may surface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 27 Jan 2026 00:00:00 GMT OpenSSL 3.6.1 includes a significant change to the RISC-V capabilities string format. • RISC-V capabilities string format now includes the base architecture and the vector length for the V extension. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/openssl-3.6.0 https://github.com/openssl/openssl/releases/tag/openssl-3.6.0 Wed, 01 Oct 2025 12:18:39 GMT OpenSSL 3.6.0 adds LMS signature verification, FIPS 186-5 deterministic ECDSA, opaque symmetric key objects, and a new configutl utility. • Adds LMS (Leighton-Micali Signature) signature verification per SP 800-208 in both the FIPS and default providers. • Adds FIPS 186-5 deterministic ECDSA signature generation to the FIPS provider. • Introduces `EVP_SKEY` opaque symmetric key objects with new EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY(), and EVP_PKEY_derive_SKEY() functions for key derivation and key exchange provider methods. • Adds NIST security categories for PKEY objects. • New `openssl configutl` utility for parsing and dumping the resolved OpenSSL configuration file. Breaking changes: • An ANSI-C (C89) toolchain is no longer sufficient to build OpenSSL; a C99-capable compiler is now required. • Support for VxWorks platforms has been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/openssl-3.5.0 https://github.com/openssl/openssl/releases/tag/openssl-3.5.0 Tue, 08 Apr 2025 13:17:20 GMT OpenSSL 3.5.0 adds server-side QUIC, post-quantum crypto (ML-KEM, ML-DSA, SLH-DSA), and opaque symmetric key objects. • Adds server-side QUIC support (RFC 9000), enabling OpenSSL-based servers to accept QUIC connections natively. • Adds support for third-party QUIC stacks, including 0-RTT support. • Adds PQC algorithm support: ML-KEM, ML-DSA, and SLH-DSA. • Enables hybrid PQC KEM groups by default in TLS, preferring X25519MLKEM768 alongside X25519 as the default keyshares. • Supports multiple TLS keyshares and improved TLS key establishment group configurability. • New `no-tls-deprecated-ec` build configuration option to disable TLS groups deprecated in RFC 8422. • New `enable-fips-jitter` build configuration option to make the FIPS provider use the JITTER entropy seed source. • Adds support for central key generation in CMP (Certificate Management Protocol). • Adds opaque symmetric key object support via the new `EVP_SKEY` API. • Adds API support for pipelining in provided cipher algorithms. • Changes default encryption cipher for `req`, `cms`, and `smime` applications from `des-ede3-cbc` to `aes-256-cbc`. Breaking changes: • The default encryption cipher for the `req`, `cms`, and `smime` applications is changed from `des-ede3-cbc` to `aes-256-cbc`; existing scripts or interoperability flows that rely on the 3DES default will produce different output. • The default TLS supported groups list now includes and prefers hybrid PQC KEM groups, and some previously available groups have been removed from the default list; peers that do not support these groups may experience handshake failures. • The default TLS keyshares are changed to offer X25519MLKEM768 and X25519; deployments depending on the previous default keyshares may see changed behaviour during TLS negotiation. • All BIO_meth_get_*() functions are deprecated; code calling these functions will receive deprecation warnings and support may be removed in a future release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 22 Oct 2024 00:00:00 GMT OpenSSL 3.4 adds PBMAC1 support, CMP templates/CRLs, XOF size API, and `-not_before`/`-not_after` cert dates • Added `JITTER` random seed source using a statically linked jitterentropy library. • Adds encapsulation and decapsulation operations to the pkeyutl command. • Added `XOF DIGEST` API with EVP_xof() helper and updated context size macros for SHAKE digests. • Added support for directly fetched composite signature algorithms (e.g. RSA-SHA2-256) in EVP signing APIs. • Added FIPS indicators to allow logging of unapproved algorithms via OSSL_INDICATOR_set_callback() in the FIPS provider. • Added `-not_before` and `-not_after` options to `req`, `x509`, and `ca` commands for explicit certificate date setting. • Added CMP support for retrieving certificate request templates (`-template`) and CRLs (`-crlcert`, `-oldcrl`, `-crlout`, `-crlform>`, `-rsp_crl`). • Added TLS integrity-only cipher suites `TLS_SHA256_SHA256` and `TLS_SHA384_SHA384` (RFC 9150). • Added support for multiple X.509v3 extensions including `issuedOnBehalfOf`, `auditIdentity`, and others. • Added Attribute Certificate (RFC 5755) support via public API. • Added `enable-pie` configuration option to build Position Independent Executables. • Redesigned Windows OPENSSLDIR/ENGINESDIR/MODULESDIR to use registry keys at run time. Breaking changes: • RSA encryption using PKCS1 padding is no longer approved in the FIPS provider. • SSL_SESSION_get_time(), SSL_SESSION_set_time(), and SSL_CTX_flush_sessions() are deprecated in favor of their _ex() replacements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_6 https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_6 Sat, 21 Sep 2024 10:05:25 GMT OpenSSL 0.9.6 adds rsautl, MD4, DER/PEM SMIME support, enhanced chain verification, and external crypto device integration. • New `rsautl` application for low-level RSA sign, verify, encrypt, and decrypt operations. • Adds MD4 digest algorithm support. • New sign and verify options added to the `dgst` application. • Supports DER and PEM encoded messages in the `smime` application. • Enhanced chain verification using key identifiers in certificate path validation. • Support for external crypto devices via the ENGINE interface (separate distribution). • Enhanced EVP interface for cryptographic operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7a https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7a Sat, 21 Sep 2024 10:05:22 GMT OpenSSL 0.9.7a adds FreeBSD/IA64 and FreeBSD/Sparc64 support, manual TLS cert chain building, and optional ENGINE-free builds. • Supports two new platforms: FreeBSD/IA64 and FreeBSD/Sparc64. • Enables manual certificate chain building in SSL/TLS connections. • Allows building OpenSSL without the ENGINE framework. • Improves compatibility with MIT Kerberos. • Includes IA32 assembler enhancements for improved performance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7b https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7b Sat, 21 Sep 2024 10:05:18 GMT OpenSSL 0.9.7b adds RSA blinding by default, linux-ia64-ecc platform support, and improved mingw/AIX/Irix builds. • Enables RSA blinding by default to harden against timing side-channel attacks. • Adds support for the linux-ia64-ecc platform. • Adds improved build support for mingw, AIX, and Irix configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7c https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7c Sat, 21 Sep 2024 10:05:15 GMT OpenSSL 0.9.7c adds -ignore_err option to the OCSP utility. • Adds `-ignore_err` option to the OCSP utility, allowing continuation past non-fatal errors during OCSP response checking. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7d https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7d Sat, 21 Sep 2024 10:05:12 GMT OpenSSL 0.9.7d allows multiple active certificates with the same subject in the CA index and speeds up HMAC operations. • Supports multiple active certificates with the same subject in the CA index. • Speeds up HMAC and other cryptographic operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7g https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7g Sat, 21 Sep 2024 10:05:01 GMT OpenSSL 0.9.7g adds proxy certificate processing per RFC 3820 • Adds processing of proxy certificates as defined in RFC 3820. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7 https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_7 Sat, 21 Sep 2024 10:04:34 GMT OpenSSL 0.9.7 adds OCSP, AES, elliptic curves, Kerberos/AES TLS suites, new hardware engines, and CRL checking. • New OCSP library section for Online Certificate Status Protocol support. • New elliptic curve cryptography library section. • New AES (Rijndael) library section with AES cipher suite support in SSL/TLS (RFC3268). • CRL checking now available in the verify code and the `openssl` utility. • Extension copying added to the `ca` utility. • Flexible display options added to the `ca` utility. • Provisional support for international characters via UTF-8. • Hardware engine support (`engine`) is now built into the main distribution — no longer a separate package. • New hardware engine support: Broadcom ubsec, Accelerated Encryption Processing, IBM 4758. • SSL/TLS: optional cipher selection according to server preference. • SSL/TLS: server can now explicitly set new session IDs. • SSL/TLS: Kerberos cipher suite support (RFC2712, MIT Kerberos). • SSL/TLS: finer-grained control over renegotiations and sessions. • SSL/TLS: new callback to retrieve SSL/TLS messages. • NCONF: new configuration handling routines. • PRNG now queries additional locations for random devices and auto-detects EGD-style random sources. • Unified handling of cryptographic algorithms (software and engine) via EVP routines for both asymmetric and symmetric ciphers. • Support for new platforms: Windows CE, Tandem OSS, A/UX, AIX 64-bit, Linux x86_64, Linux 64-bit on SPARC v9. • Extended platform support for VxWorks and enhanced shared library support. • Support for `pkg-config` integration. Breaking changes: • The DES API namespace has been changed to avoid collisions with libdes; macros for backward compatibility are provided but will be removed in a future release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8b https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8b Sat, 21 Sep 2024 10:04:27 GMT OpenSSL 0.9.8b adds EVP cipher context heap API, updated ECC cipher suites, and Win32 dynamic engine compilation. • New EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free() functions enable heap-allocated cipher context management in the EVP API. • Updated ECC cipher suite support expands elliptic-curve TLS options. • Built-in dynamic engine compilation support on Win32 allows engines to be compiled and loaded dynamically on that platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8f https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8f Sat, 21 Sep 2024 10:04:12 GMT OpenSSL 0.9.8f adds TLS Extensions, RFC4507bis session tickets, DTLS improvements, and AES/SSE2 assembly optimizations for VC++. • Adds RFC4507bis session ticket support, allowing stateless TLS session resumption without server-side session cache. • Supports Server Name Indication (SNI) extension when explicitly enabled at compile time, enabling virtual hosting over TLS. • Adds AES and SSE2 assembly-language optimizations for VC++ builds, accelerating symmetric crypto on Windows x86 targets. • Delivers DTLS (Datagram TLS) improvements for UDP-based encrypted communications. • Adds gcc 4.2 compiler support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8m https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8m Sat, 21 Sep 2024 10:03:44 GMT OpenSSL 0.9.8m adds RFC 5746 TLS renegotiation extension support and removes MD2 from algorithm tables. • Supports RFC 5746 TLS renegotiation extension, enabling secure renegotiation per the IETF standard. • Removes MD2 from algorithm tables, hardening the default cryptographic surface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8 https://github.com/openssl/openssl/releases/tag/OpenSSL_0_9_8 Sat, 21 Sep 2024 10:02:16 GMT OpenSSL 0.9.8 adds ECDH/ECDSA, DTLS, SHA-2 family, RSA-PSS, IPv6 certs, and a new STORE library. • Adds ECDH and ECDSA elliptic curve cryptography, accessible via EVP, X509, and ENGINE interfaces. • Adds BIGNUM support for fields GF(2^m) and NIST curves to underpin elliptic crypto operations. • Adds support for DTLS (Datagram Transport Layer Security). • Adds FIPS 180-2 hash algorithms: SHA-224, SHA-256, SHA-384, and SHA-512. • Adds support for the RSA-PSS encryption scheme. • Adds support for RSA X.931 padding. • New PKCS#12 'medium level' API for programmatic manipulation of PKCS#12 files. • New ASN.1 mini-compiler usable through the OpenSSL configuration file. • Adds support for ASN.1 indefinite length constructed encoding. • New STORE library providing a unified interface to data repositories for keys, certificates, CRLs, and arbitrary blobs. • New X509_VERIFY_PARAM structure enabling parametrisation of X.509 path validation. • Adds support for IPv6 addresses in certificate extensions (RFC 1884 §2.2). • Adds support for certificate policy mappings, policy constraints, and name constraints. • Adds support for multiple certificates with the same subject in the 'openssl ca' index file. • New 'openssl ca -selfsign' option to create self-signed certificates. • New 'openssl ca -create_serial' option to generate a serial number file. • ENGINE framework now loads dynamic engine modules automatically from specified directories. • New GMP engine module for private key exponentiation. • New VIA PadLock ACE engine module for VIA C3 Nehemiah processors. • Adds support for multi-valued AVAs in the OpenSSL configuration file. • New BIGNUM blinding support. • PKCS#7 library updated to support one-pass S/MIME processing. • Adds compile-time option to exclude deprecated functionality via OPENSSL_NO_DEPRECATED macro or 'no-deprecated' config argument. • Adds support for files larger than 2 GB. • Adds initial support for Win64. • Adds support for BSD sockets on NetWare. • Major RC4 performance overhaul on Intel P4, IA-64, and AMD64. • New control functions for the error stack. • New BUF functions and binary search functions with extended functionality. Breaking changes: • The default digest in 'openssl' commands is changed from MD5 to SHA-1. • The Configure script now disables some algorithms by default; they must be explicitly enabled with 'enable-xxx'. • The key-generation and primality testing progress mechanism now requires a structure containing the ticker function and an argument, rather than a plain callback. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_0e https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_0e Sat, 21 Sep 2024 10:01:35 GMT OpenSSL 1.0.0e adds ECDH cipher suite support for SHA-2 certificates and EC timing-attack protections. • Supports ECDH cipher suites for certificates using SHA-2 algorithms. • Adds protection against EC timing-channel attacks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_0 https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_0 Sat, 21 Sep 2024 10:00:33 GMT OpenSSL 1.0.0 adds CMS, GOST, PSK, RFC3161 timestamps, Whirlpool, and full PKCS#8 private key support. • Adds RFC3280 path validation sufficient to process PKITS tests. • Adds integrated support for PVK files and keyblobs. • Changes default private key format to PKCS#8. • Adds CMS (Cryptographic Message Syntax) support, able to process all examples in RFC4134. • Adds streaming ASN1 encode support for PKCS#7 and CMS. • Adds multiple signer and signer-add support for PKCS#7 and CMS. • Adds ASN1 printing support. • Adds Whirlpool hash algorithm. • Adds RFC3161 time stamp support. • Introduces new generalised public key API supporting ENGINE-based algorithms. • Introduces new generalised public key API utilities. • Adds new ENGINE supporting GOST algorithms. • Adds SSL/TLS GOST ciphersuite support. • Adds PKCS#7 and CMS GOST support. • Adds RFC4279 PSK ciphersuite support. • Adds supported points format extension for ECC ciphersuites. • Adds ecdsa-with-SHA224/256/384/512 signature types. • Adds dsa-with-SHA224 and dsa-with-SHA256 signature types. • Adds Opaque PRF Input TLS extension support. Breaking changes: • The default private key format is now PKCS#8; tooling or scripts that expect the legacy PEM format by default will produce or consume keys in a different format on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_1g https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_1g Sat, 21 Sep 2024 09:59:53 GMT Adds TLS padding extension workaround for broken servers • Add TLS padding extension workaround for broken servers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_1 https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_1 Sat, 21 Sep 2024 09:58:54 GMT OpenSSL 1.0.1 adds TLS 1.2/1.1, DTLS-SRTP, heartbeat, SCTP, SRP, and key material export. • Adds TLS v1.2 and TLS v1.1 protocol support. • Adds TLS/DTLS heartbeat support. • Adds SCTP (Stream Control Transmission Protocol) transport support. • Adds RFC 5705 TLS key material exporter. • Adds RFC 5764 DTLS-SRTP negotiation for secure media transport. • Adds Next Protocol Negotiation (NPN) extension support. • Adds PSS signatures in certificates, certificate requests, and CRLs. • Adds password-based recipient info support for CMS. • Adds SRP (Secure Remote Password) support. • Adds preliminary FIPS capability for the unvalidated 2.0 FIPS module. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_2 https://github.com/openssl/openssl/releases/tag/OpenSSL_1_0_2 Sat, 21 Sep 2024 09:57:17 GMT OpenSSL 1.0.2 adds DTLS 1.2, Suite B, ALPN, Brainpool, and expanded CMS algorithm support. • Adds Suite B support for TLS 1.2 and DTLS 1.2, enabling NSA Suite B cryptography compliance. • Supports DTLS 1.2, bringing the latest datagram TLS version to OpenSSL. • Enables automatic EC curve selection for TLS connections. • New API to set TLS supported signature algorithms and curves programmatically. • New SSL_CONF configuration API for streamlined TLS configuration. • Adds TLS Brainpool curve support. • Supports ALPN (Application-Layer Protocol Negotiation) for protocol multiplexing over TLS. • Expands CMS support to include RSA-PSS, RSA-OAEP, ECDH, and X9.42 DH algorithms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_0 https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_0 Sat, 21 Sep 2024 09:56:14 GMT OpenSSL 1.1.0 adds ChaCha20/Poly1305, X25519, DANE TLSA, Certificate Transparency, async crypto, and more. • Adds ChaCha20 and Poly1305 support to both libcrypto and libssl. • Adds support for X25519 key exchange. • Adds support for RFC6698/RFC7671 DANE TLSA peer authentication. • Adds Certificate Transparency support. • Adds HKDF support to libcrypto. • Adds support for scrypt algorithm. • Adds support for OCB mode in libcrypto. • Adds support for asynchronous crypto operations in libcrypto and libssl. • Adds pipelining support for improved throughput in TLS. • Adds the AFALG engine for kernel-accelerated crypto on Linux. • Adds new threading API. • Adds support for extended master secret. • Adds CCM ciphersuites. • Adds new security levels to libssl. • Adds KDF algorithm support, including TLS PRF as a KDF. • Extends SSL_CONF support to configuration files. • Reworked BIO networking library with full IPv6 support. • Introduces new 'unified' build system. • Deprecated interfaces can now be disabled at build time via 'no-deprecated' or '--api=' Configure options. • Application software can be compiled with -DOPENSSL_API_COMPAT=version to gate deprecated API exposure. • Shared builds are now the default when possible. Breaking changes: • Most libcrypto and libssl public structures are now opaque (including BIGNUM, EC_KEY, DH, DSA, RSA, BIO, EVP_MD_CTX, EVP_CIPHER_CTX, EVP_PKEY, HMAC_CTX, X509, X509_CRL, X509_STORE, and related types), breaking code that accesses their members directly. • libssl internal structures are now opaque, breaking any code that accessed them directly. • SSLv2 support has been removed. • Kerberos ciphersuite support has been removed. • RC4 has been removed from DEFAULT ciphersuites in libssl. • 40-bit and 56-bit cipher support has been removed from libssl. • All public header files moved to include/openssl; no more symlinking, which may break build systems expecting the old layout. • Configure now uses --prefix as the main installation directory; --openssldir is now exclusively for certs, private keys, and openssl.cnf. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1h https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1h Sat, 21 Sep 2024 09:55:04 GMT OpenSSL 1.1.1h lets MinProtocol/MaxProtocol configure both TLS and DTLS contexts in a single setting. • Enables `MinProtocol` and `MaxProtocol` config directives to govern both TLS and DTLS contexts simultaneously. • Enforces disallowance of explicit curve parameters in verification chains when `X509_V_FLAG_X509_STRICT` is set. Breaking changes: • Explicit curve parameters in verification chains are now rejected when `X509_V_FLAG_X509_STRICT` is used, which may break certificate verification for chains that previously relied on explicit curve parameters under strict mode. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1 https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1 Sat, 21 Sep 2024 09:54:21 GMT OpenSSL 1.1.1 adds TLSv1.3, overhauled RNG, EdDSA/SM2/SHA3 algorithms, and a new URI-based STORE module. • Adds fully compliant TLSv1.3 (RFC 8446) support enabled by default, including 0-RTT early data, post-handshake authentication, key update, middlebox compatibility mode, PSKs, and all five RFC 8446 ciphersuites. • Supports stateless TLS server mode and configurable session ticket support under TLSv1.3. • Backports RSA-PSS signature algorithms to TLSv1.2. • Rewrites the OpenSSL RNG around an AES-CTR DRBG (NIST SP 800-90Ar1) with per-thread public/private DRBG instances, seed chaining, fork-safety, and optional secure-heap storage. • Adds SHA3, SHA512/224, SHA512/256, EdDSA (Ed25519 and Ed448 with X.509 and TLS support), X448, multi-prime RSA, SM2, SM3, SM4, SipHash, and ARIA (with TLS support). • New ClientHello callback enables adjustment of the SSL object before handshake processing begins. • Adds Maximum Fragment Length TLS extension negotiation and support. • New STORE module provides a uniform, URI-based reader for keys, certificates, CRLs, and other objects. • Claim of OSSL and OPENSSL symbol prefix namespaces for cleaner library symbol management. • Rewrites the devcrypto engine. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/releases/tag/openssl-3.0.0 https://github.com/openssl/openssl/releases/tag/openssl-3.0.0 Sat, 21 Sep 2024 09:51:14 GMT OpenSSL 3.0 adds providers, CMP, Kernel TLS, EVP_MAC/KDF APIs, OSSL_ENCODER/DECODER, and new CLI commands. • Adds providers, a new pluggability framework replacing the ENGINE API, enabling fully modular cryptographic implementations. • Implements support for fully pluggable TLSv1.3 groups. • Adds Kernel TLS (KTLS) support for offloading TLS record processing to the OS kernel. • Adds a full Certificate Management Protocol (CMP, RFC 4210) implementation — including CRMF (RFC 4211) and HTTP transfer (RFC 6712) — with a new `cmp` CLI app covering both client and server roles. • Adds a proper HTTP client supporting GET/POST, TLS, persistent connections, HTTP(S) proxy, redirects, user-defined BIOs, and timeout checks. • Adds `EVP_MAC`, an EVP-layer MAC API supporting BLAKE2, CMAC, GMAC, HMAC, KMAC, POLY1305, and SIPHASH. • Adds `EVP_KDF`, an EVP-layer KDF/PRF API supporting HKDF, KBKDF, KRB5 KDF, PBKDF2, PKCS12 KDF, SCRYPT, SSH KDF, SSKDF, TLS1 PRF, X9.42 KDF, and X9.63 KDF. • Adds new `openssl mac` command for MAC computation via the EVP_MAC API. • Adds new `openssl kdf` command for key derivation via the EVP_KDF API. • Adds `openssl info` command and OPENSSL_info() API for querying built-in configuration data. • Enhances `openssl list` with many new options for inspecting available algorithms, providers, and capabilities. • Adds `OSSL_ENCODER` and `OSSL_DECODER`, generic encoder/decoder APIs for key and certificate serialization. • Adds `OSSL_LIB_CTX`, a library context enabling multiple isolated libcrypto instances within a single process. • Adds `OSSL_PARAM_BLD`, a simpler builder API for constructing `OSSL_PARAM` arrays. • Adds OSSL_PROVIDER_available() to programmatically check whether a given provider is loaded. • Adds convenience functions for generating asymmetric key pairs. • Adds error raising macros ERR_raise() and ERR_raise_data() for structured error reporting. • Adds instrumentation support through trace and debug output. • Includes X25519, X448, Ed25519, Ed448, SHAKE128, and SHAKE256 in the FIPS provider. • Moves legacy ciphers (CAST5, BF, IDEA, SEED, RC2, RC4, RC5, DES) and legacy digests (MD2, MD4, MDC2, WHIRLPOOL, RIPEMD-160) to the legacy provider. Breaking changes: • SSL 3, TLS 1.0, TLS 1.1, and DTLS 1.0 only work at security level 0; they are blocked at higher security levels. • X509 certificates signed using SHA1 are no longer trusted at security level 1 or higher; since the default TLS security level is 1, SHA1-signed certificates no longer authenticate servers or clients by default. • The `RAND_DRBG` API is removed; code using it will not compile. • Interactive mode is removed from the `openssl` program; scripts relying on it will break. • The heartbeat message feature in DTLS is removed. • CAST5, BF, IDEA, SEED, RC2, RC4, RC5, and DES EVP ciphers are moved to the legacy provider; setups not loading the legacy provider will lose access to these algorithms. • MD2, MD4, MDC2, WHIRLPOOL, and RIPEMD-160 EVP digests are moved to the legacy provider; setups not loading the legacy provider will lose access to these digests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 09 Apr 2024 00:00:00 GMT OpenSSL 3.3 adds QUIC tracing (qlog), CMPv3 profile support, `x509` issuer/subject flags, and Y2038-safe session time APIs • Adds experimental qlog tracing for QUIC connections; its pre-standard output has no format stability guarantee and can be disabled with no-unstable-qlog. • Adds `-profile` CLI option to enable `certProfile` request message header in CMPv3 (RFC 9480/9483). • Adds `-set_issuer` and `-set_subject` options to `openssl x509` to override certificate Issuer and Subject fields. • Adds SSL_SESSION_get_time_ex() and SSL_SESSION_set_time_ex() using time_t; Y2038 safety on 32-bit systems requires 64-bit time support. • Adds new option `SSL_OP_PREFER_NO_DHE_KEX` to prefer PSK-only key exchange in TLS 1.3. • Adds API `SSL_write_ex2` to send end-of-stream (FIN) condition efficiently for QUIC. • Adds atexit configuration switch to control `OPENSSL_cleanup` registration on libcrypto unload. • Adds APIs to configure negotiated idle timeout and query additional stream count for QUIC connections. • Adds API to disable implicit QUIC event processing, allowing manual control of event handling. • Adds limited non-blocking polling support for QUIC connection and stream objects via SSL_poll(3). • Adds APIs to query size and utilisation of a QUIC stream's write buffer via SSL_get_value_uint(3). • Adds default limit of 256 header lines for HTTP client responses, configurable via `OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines`. • Adds new API EVP_DigestSqueeze() to allow multiple SHAKE squeezes with different output sizes. • Adds assembly implementation for md5 on loongarch64 and optimizes AES-CTR for ARM Neoverse V1/V2. • Enables AES and SHA3 optimisations on Apple Silicon M3-based MacOS systems. Breaking changes: • The `-verify` option to `openssl crl` and `openssl req` now exits with code 1 on failure instead of continuing or returning 0. • The `activate` and `soft_load` configuration settings in `openssl.cnf` now require strict values (`[1|yes|true|on]` or `[0|no|false|off]`); other values result in an error. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Thu, 23 Nov 2023 00:00:00 GMT OpenSSL 3.2.0 adds client-side QUIC support, HPKE (RFC9180), pluggable TLS signatures, and new CLI/config surfaces. • Added client side support for QUIC • Provide a new configure option `no-http` that can be used to disable the HTTP support. • Add the `-quic` option to s_client to enable connectivity to QUIC servers. • Add an "advanced" command mode to s_client. Use this with the `-adv` option. • Added support for Hybrid Public Key Encryption (HPKE) as defined in RFC9180. • Added support for pluggable (provider-based) TLS signature algorithms. • Added support for certificate compression (RFC8879). • Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload. • Add the `-ktls` option to `s_server` and `s_client` commands to enable the KTLS support. • Added platform-agnostic OSSL_sleep() function. • Provide a new configure option `no-ecx` that can be used to disable the X25519, X448, and EdDSA support. • Add Raw Public Key (RFC7250) support. • Added SHA256/192 algorithm support. • Added new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting. • Support for loading root certificates from the Windows certificate store has been added. Breaking changes: • The default SSL/TLS security level has been changed from 1 to 2. RSA, DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys of 160 bits and above and less than 224 bits were previously accepted by default but are now no longer allowed. • The `ess_cert_id_alg` configuration option which is used to calculate the TSA's public key certificate identifier has its default algorithm updated from sha1 to sha256. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 30 May 2023 00:00:00 GMT OpenSSL 3.1.1 adds -pedantic flag to fipsinstall and no_drbg_truncated_digests option for stricter FIPS compliance • Adds `-pedantic` option to `fipsinstall` subcommand to enforce strict FIPS compliance. • Adds `-no_drbg_truncated_digests` option to `openssl fipsinstall` to disallow truncated digests in Hash and HMAC DRBGs per FIPS 140-3 IG D.R. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 01 Nov 2022 00:00:00 GMT OpenSSL 3.0.7 adds RIPEMD160 to the default provider and fixes regressions. • Adds `RIPEMD160` to the default provider so it is available for use without loading external providers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 03 May 2022 00:00:00 GMT OpenSSL 3.0.3 adds case-insensitive string comparison via new locale-agnostic functions. • Implements new `OPENSSL_str[n]casecmp` functions for case insensitive string comparison using POSIX locale semantics • Changes `OPENSSL_LH_stats` and `OPENSSL_LH_stats_bio` to report only `num_items`, `num_nodes` and `num_alloc_nodes` statistics Breaking changes: • `OPENSSL_LH_stats` and `OPENSSL_LH_stats_bio` no longer report valid values for any statistics other than `num_items`, `num_nodes` and `num_alloc_nodes` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl https://github.com/openssl/openssl/blob/HEAD/CHANGES.md https://github.com/openssl/openssl/blob/HEAD/CHANGES.md Tue, 14 Dec 2021 00:00:00 GMT OpenSSL 3.0.1 adds configurable integer parsing and unexportable key fallbacks in the provider system. • Allow sign extension in OSSL_PARAM_allocate_from_text() for `OSSL_PARAM_INTEGER` and reject negative numbers for `OSSL_PARAM_UNSIGNED_INTEGER`. • Make OSSL_PARAM_BLD_push_BN{,_pad}() return an error on negative numbers. • Allow copying uninitialized digest contexts with `EVP_MD_CTX_copy_ex`. • Allow fetching an operation from the provider that owns an unexportable key as a fallback if allowed by the property query. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openssl