OpenSSL 4.0 Released With Encrypted Client Hello, RFC 8998 Support
OpenSSL 4.0 was just released as a big update for this widely-used SSL/TLS and crypto library.
OpenSSL 4.0 delivers better privacy with Encrypted Client Hello (ECH) support to encrypt the initial TLS handshake and hide the Server Name Indication. OpenSSL 4.0 also drops legacy SSLv3 and other old protocol/engine support, improves post-quantum cryptography support with RFC 8998 support, ML-DSA-MU, and tls-hybrid-sm2-mlkem post-quantum group.
OpenSSL 4.0 also makes use of the major version bump to introduce other incompatible changes like removing SSLv2 Client Hello and dropping support for engines as well as removing the Darwin i386 and PowerPC/PPC64 targets.
More details on the OpenSSL 4.0 release via GitHub.
OpenSSL 4.0 delivers better privacy with Encrypted Client Hello (ECH) support to encrypt the initial TLS handshake and hide the Server Name Indication. OpenSSL 4.0 also drops legacy SSLv3 and other old protocol/engine support, improves post-quantum cryptography support with RFC 8998 support, ML-DSA-MU, and tls-hybrid-sm2-mlkem post-quantum group.
OpenSSL 4.0 also makes use of the major version bump to introduce other incompatible changes like removing SSLv2 Client Hello and dropping support for engines as well as removing the Darwin i386 and PowerPC/PPC64 targets.
More details on the OpenSSL 4.0 release via GitHub.