## LibreSSL 4.3.1 released!
* Internal improvements
- Remove the unused sequence number from X509_REVOKED.
- Replace a call to atoi() with strtonum() in nc(1) and replace a
misleading use of ntohs() with htons().
- openssl(1) speed now uses HMAC-SHA256 for its hmac benchmark.
- Reimplemented only use of ASN1_PRINTABLE_type() in openssl(1) ca.
The API will be removed in an upcoming release.
- Add curve NID to EC_POINT objects so the library has a clue on which
curve a given EC_POINT is supposed to live.
- Use curve NID to check for compatibility between group and points
in various EC API. This isn't 100% failsafe but good enough for sane
uses.
- Require SSE in order to use gcm_{gmult,ghash}_4bit_mmx().
On rare i386 machines suporting MMX but not SSE this could result
in an illegal instruction.
- Cleaned up asn1t.h to make it somewhat readable and more robust by
using C99 initializers in particular.
- Further assembly macro improvements for -portable.
- Add fast path for well-known DH primes in DH_check() (including
those from RFC 7919). Some projects still fiddle with this in 2025.
- Rewrite ec_point_cmp() for readability and robustness.
- Improve EVP_{Open,Seal}Init() internals. This is legacy API that
cannot be removed since one scripting language still exposes it.
- ASN1_BIT_STRING_set_bit() now trims trailing zero bits itself rather
than relying on i2c_ASN1_BIT_STRING() to do that when encoding.
- Fix and add workarounds to libtls to improve const correctness and
to avoid warnings when compiling with OpenSSL 4.
- Prefix EC_KEY methods with ec_key_ to avoid problems in some static
links.
https://undeadly.org/cgi?action=article;sid=20260420085845
Go read ALL about it here!
#SSL #libre #BSD #openBSD #OpenSource #programming #networking #Secure #Socket #Layer
3i/Atlas
Beautiful Mutant Studio
Dendrobatus Azureus
Arie in Wonderland
Knowledge Zone
Hacker News
misryoum global news network
Script Kiddie
Dining and Cooking
WordofTheHour