OpenSSL 3.5 Released
The OpenSSL team has released OpenSSL 3.5 featuring support for post-quantum computing (PQC) algorithms and other new features.
Updates and changes in this release include:
- Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA).
-
The default TLS supported groups list has been changed to include and
prefer hybrid PQC KEM groups. - Support for server side QUIC (RFC 9000).
- Support for third-party QUIC stacks including 0-RTT support.
- Support for multiple TLS keyshares and improved TLS key establishment group configurability.
OpenSSL 3.5 is a long-term stable (LTS) release and will be supported until April 8, 2030.
See the release notes for details.
04/24/2025
Related content
- High-Severity OpenSSL Security Advisory Released
-
Security after Heartbleed – OpenSSL and its alternatives
The Heartbleed bug shocked the security community and seriously damaged the reputation of OpenSSL. Luckily, alternatives such as LibreSSL, PolarSSL, and GnuTLS are waiting in the wings. -
News for Admins
OpenSSL has issued an advisory (https://www.openssl.org/news/secadv/20221101.txt) relating to two vulnerabilities (CVE-2022-3602 and CVE-2022-3786), which affect OpenSSL version 3.0.0.
- Google Forks OpenSSL
- Emergency Fix for OpenSSL