OpenSSL 4.1.0 Alpha Adds DTLS 1.3 and Post-Quantum Crypto Optimizations

· Original article ↗

Summary

OpenSSL 4.1.0 alpha1 adds DTLS 1.3, post-quantum cryptography optimizations, and other protocol and architecture support. The release also changes dependencies and drops support for Windows-on-Itanium and Windows CE.

Key points

  • OpenSSL 4.1.0 alpha1 introduces support for DTLS 1.3.
  • The release adds optimized ML-DSA and ML-KEM operations for ppc64le, ML-DSA optimizations for s390x and x86_64, and AVX-512 acceleration for SHAKE used by ML-DSA.
  • An AVX-512 and VAES optimization speeds up AES-CBC decryption on x86_64.
  • The tsget utility now requires the Net::Curl::Easy Perl module instead of WWW::Curl::Easy.
  • The build drops support for Windows-on-Itanium and Windows CE; the Configure options no-ecdsa and no-ecdh are removed in favor of no-ec.
  • Other additions include GREASE support, a DTLS mode for the SSL listener API, IKEv2 key derivation support, and initial Elbrus2000 support.
  • This is an early test build, and the feature list may change before the final release.

Article Details

Event Type
Software release
Impact
OpenSSL 4.1.0 alpha1 introduces DTLS 1.3 support and performance optimizations for post-quantum ML-DSA and ML-KEM, along with other protocol and architecture updates. The release also changes the tsget Perl dependency and removes support for Windows-on-Itanium and Windows CE; as an alpha, its feature list may change before general availability.

Vendors

Products

Related Articles