Both big TLS libraries got releases this week, Phoronix reports.
OpenSSL 4.1
- DTLS 1.3 support: faster handshakes, forward secrecy and built-in post-quantum support for the datagram version of TLS.
- GREASE support, which sends random, meaningless values during TLS handshakes so broken peers get caught early.
- More AVX-512: SHAKE x4 for ML-DSA on x86_64, plus faster AES-CBC decryption.
- Windows on Itanium and Windows CE support are finally retired.
LibreSSL 4.4
- OpenBSD’s fork brings faster SHA3 and bug fixes.
My take
These are feature releases, not emergency patches, so let your distro ship them on its normal schedule. Arch and Omarchy folks will see OpenSSL 4.1 soon. Post-quantum DTLS is nice to see, since VPNs and real-time apps run over it.
Have a blessed day! And Happy Hacking!
