OpenSSL’s new alpha build speeds up post-quantum crypto
OpenSSL 4.1.0 alpha1 adds DTLS 1.3 support and speeds up ML-DSA and ML-KEM post-quantum operations across several architectures.
The OpenSSL project released the first alpha of OpenSSL 4.1.0, months before general availability. The build adds DTLS 1.3 (RFC 9147) to secure UDP-based traffic such as VPNs, video calls and IoT, and includes optimized ML-DSA and ML-KEM operations for ppc64le, s390x and x86_64 plus AVX-512 acceleration for SHAKE hashing and AES-CBC decryption. Breaking changes include a new Net::Curl::Easy dependency for tsget, dropped Windows-on-Itanium and Windows CE support, and replacement of the no-ecdsa/no-ecdh Configure options with no-ec. It also adds GREASE support (RFC 8701), a DTLS mode for the SSL listener API, IKEv2 KDF support, and initial Elbrus2000 processor architecture support.
- First alpha of OpenSSL 4.1.0 adds DTLS 1.3 per RFC 9147 for securing UDP traffic like VPNs and IoT.
- Post-quantum speedups: ML-DSA and ML-KEM for ppc64le, ML-DSA for s390x/x86_64, AVX-512 for SHAKE and AES-CBC.
- Breaking changes: tsget needs Net::Curl::Easy; Itanium and Windows CE dropped; no-ec replaces no-ecdsa/no-ecdh.
- Also adds GREASE (RFC 8701), DTLS listener API mode, IKEv2 KDF, and Elbrus2000 CPU support.
- Vendors
- OpenSSL
- Products
- OpenSSL 4.1.0
- Organizations
- OpenSSL
From the original article
2 min read at helpnetsecurity.com
The OpenSSL project released the first alpha of OpenSSL 4. 1. 0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.