LibreSSL 4.4 released with faster SHA3 performance
Key Takeaway
LibreSSL 4.4 introduces optimized SHA-3 algorithms and removes compromised eMudhra certificates.
Summary
The OpenBSD developers have released LibreSSL 4.4, the latest version of the OpenSSL fork. This update focuses on performance improvements for SHA-3 and security hardening by removing the compromised eMudhra emSign ECC Root CA - G3. The release also includes various bug fixes and portability improvements.
Performance and Security Updates
- SHA-3 performance: Improved through the use of an unrolled and interleaved algorithm.
- Security: Removed the eMudhra emSign ECC Root CA - G3 due to weak private keys; added uncompromised intermediate certificates for interoperability.
- General improvements: Includes Microsoft Windows fixes, code cleanup, and portability enhancements.
Why it matters
The removal of compromised certificates improves the security posture for users relying on LibreSSL for TLS/SSL operations.
Original reference: www.phoronix.com →