Skip to content

OpenSSL 3.6.0 Unveiled: New Features Include NIST Security Categories & Deterministic ECDSA Signatures

Discover the latest OpenSSL update. It's packed with new features to enhance security and simplify configuration.

This picture shows few cross symbols and few papers and key chains on the glass table.
This picture shows few cross symbols and few papers and key chains on the glass table.

OpenSSL 3.6.0 Unveiled: New Features Include NIST Security Categories & Deterministic ECDSA Signatures

The OpenSSL Project has launched OpenSSL 3.6.0, the latest iteration of the widely-used cryptographic software library, on September 13, 2023. This release introduces numerous new features and enhancements, including support for NIST security categories and deterministic ECDSA signatures.

One of the standout additions in OpenSSL 3.6.0 is the integration of NIST security category information for public key objects. This aligns the library with evolving NIST standards, providing users with more detailed and up-to-date security news.

The new version also supports deterministic ECDSA signature generation, complying with FIPS 186-5 in the FIPS provider. This enhancement ensures that OpenSSL remains at the forefront of cryptographic security.

A notable new utility introduced in OpenSSL 3.6.0 is 'openssl configutl'. This tool simplifies configuration tasks, making it easier for users to manage the library's settings.

OpenSSL 3.6.0 also adds support for EVP_SKEY opaque symmetric key objects, further expanding the library's capabilities.

However, the new version requires a C99-compliant toolchain for building, marking a shift from the previous ANSI-C-only requirement. Additionally, support for the VxWorks operating system has been removed.

In terms of deprecations, functions related to EVP_PKEY_ASN1_METHOD have been marked as deprecated in OpenSSL 3.6.0, indicating that they may be removed in future versions.

OpenSSL 3.6.0, released by The OpenSSL Project, brings significant updates including NIST security category support, deterministic ECDSA signatures, a new configuration utility, and more. While it introduces new requirements and removes support for certain platforms, the update reflects the project's commitment to staying current with evolving social security standards.

Read also:

Latest