news
OpenSSL 3.5 Released with Support for PQC Algorithms, Server-Side QUIC
Coming more than six months after OpenSSL 3.4, the OpenSSL 3.5 release introduces new features like support for server-side QUIC (RFC 9000), support for third-party QUIC stacks (including 0-RTT support), support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA), and support for central key generation in CMP.
OpenSSL 3.5 also introduces support for opaque symmetric key objects (EVP_SKEY), support for multiple TLS keyshares and improved TLS key establishment group configurability, and API support for pipelining in provided cipher algorithms.
Update
Also here:
-
OpenSSL 3.5 Brings Major Cryptographic Shifts
As the main highlight, the default encryption cipher for the req, cms, and smime applications has been changed from des-ede3-cbc to the more powerful aes-256-cbc.
LWN:
-
OpenSSL 3.5.0 released
Version 3.5.0 of OpenSSL has been released. This release adds support for server-side QUIC (RFC 9000), a new configuration option (no-tls-deprecated-ec) that disables support for TLS groups deprecated in RFC 8422, and more.