@@ -28,18 +28,25 @@ OpenSSL 3.5
2828OpenSSL 3.5.0 is a feature release adding significant new functionality to
2929OpenSSL.
3030
31- This release is in development.
32-
3331This release incorporates the following potentially significant or incompatible
3432changes:
3533
3634 * Default encryption cipher for the ` req ` , ` cms ` , and ` smime ` applications
3735 changed from ` des-ede3-cbc ` to ` aes-256-cbc ` .
3836
39- * Support for server side QUIC (RFC 9000)
37+ * The TLS supported groups list has been changed in favor of PQC support.
38+
39+ * The default TLS keyshares have been changed to offer X25519MLKEM768 and
40+ and X25519.
4041
4142This release adds the following new features:
4243
44+ * Support for server side QUIC (RFC 9000)
45+
46+ * Support for 3rd party QUIC stacks
47+
48+ * Support for PQC algorithms (ML-KEM, ML-DSA, SLH-DSA)
49+
4350 * Allow the FIPS provider to optionally use the ` JITTER ` seed source.
4451 Because this seed source is not part of the OpenSSL FIPS validations,
4552 it should only be enabled after the [ jitterentropy-library] has been
@@ -50,10 +57,14 @@ This release adds the following new features:
5057
5158 * Support for central key generation in CMP
5259
60+ * Support added for opaque symmetric key objects (EVP_SKEY).
61+
62+ * Support for multiple TLS keyshares.
63+
5364OpenSSL 3.4
5465-----------
5566
56- ### Major changes between OpenSSL 3.4.0 and OpenSSL 3.4.1 [ under development ]
67+ ### Major changes between OpenSSL 3.4.0 and OpenSSL 3.4.1 [ 11 Feb 2025 ]
5768
5869OpenSSL 3.4.1 is a security patch release. The most severe CVE fixed in this
5970release is High.
0 commit comments