Linux Kernel & OS

LibreSSL 4.4 released with faster SHA3 performance

Key Takeaway

LibreSSL 4.4 introduces optimized SHA-3 algorithms and removes compromised eMudhra certificates.

Summary

The OpenBSD developers have released LibreSSL 4.4, the latest version of the OpenSSL fork. This update focuses on performance improvements for SHA-3 and security hardening by removing the compromised eMudhra emSign ECC Root CA - G3. The release also includes various bug fixes and portability improvements.

Performance and Security Updates

  • SHA-3 performance: Improved through the use of an unrolled and interleaved algorithm.
  • Security: Removed the eMudhra emSign ECC Root CA - G3 due to weak private keys; added uncompromised intermediate certificates for interoperability.
  • General improvements: Includes Microsoft Windows fixes, code cleanup, and portability enhancements.

Why it matters

The removal of compromised certificates improves the security posture for users relying on LibreSSL for TLS/SSL operations.

Original reference: www.phoronix.com →