🔒OpenSSL 4.1.0 Adds Major Functionality and Incompatible Changes
OpenSSL 4.1.0 drops support for legacy platforms
TL;DR
OpenSSL 4.1.0 introduces significant new features and drops support for legacy platforms. Key changes include DTLS 1.3 support and new build targets for improved C99 support. Developers should review the release notes for potential impact on their projects.
OpenSSL 4.1.0 is out with major new features and some backward-incompatible changes. The release adds support for DTLS 1.3 and GREASE, enhancing security and compatibility. It also drops support for Windows-on-Itanium and Windows CE, focusing on modern platforms. OpenSSL 4.1.0 also introduces optimized ML-DSA and ML-KEM NTT operations on ppc64le, improving performance. Developers using legacy platforms need to update their configurations to avoid compatibility issues.
Key Points
OpenSSL 4.1.0 drops support for Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) targets, focusing on modern platforms.
The release adds support for DTLS 1.3 (RFC 9147) and GREASE (RFC 8701) to enhance security and compatibility.
Optimized ML-DSA and ML-KEM NTT operations were added on ppc64le, improving performance for specific architectures.
AVX-512 and VAES optimizations were added for AES-CBC decryption on x86_64, enhancing encryption performance.
The no-ecdsa and no-ecdh options were dropped from Configure, simplifying the configuration process.
Why It Matters
If you're using OpenSSL in a legacy Windows environment, you need to migrate to a supported platform. The new DTLS 1.3 support and GREASE features enhance security for modern applications. Developers should review the release notes for potential impact on their projects.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.