OpenSSL

From MgmtWiki
Jump to: navigation, search

Full Title

Open SSL is an Open Source software package for cryptography. The package was originally create to support SSL the precursor to TLS.

Context

The Downloads are available here

  • On 2023-11-25 the version 3.2 was announced for long term support until 2025-11-25/

OpenSSL 3.2.0 has support for using Windows OS trust stores, raw public keys for TLS and third-party signature schemes enabling PQC signatures to be experimented with, certificate compression which is important for PQC certificates, and Hybrid Public Key Encryption (HPKE).

The following OpenSSL version(s) are FIPS validated: 2023-11

OpenSSL Version 	 Certificate 	 Security Policy 
3.0.8	certificate	security policy
3.0.0	certificate	security policy

Other Solutions

  • Tink from Google mostly written in Go Language.
  • 2024-03 Rustls get FIPS approval
  • 2024-10 In the latest round of performance tests, Rustls outperformed both OpenSSL and BoringSSL in every handshake and throughput scenario, proving that not only is Rustls safer, it is also the most performant of the three!

References

  • WolfSSL a smaller version for embedded applications.