LibreSSL
| LibreSSL
|
|
|---|---|
|
|
| Basic data
|
|
| developer | The OpenBSD project |
| Publishing year | 2014 |
| Current version |
3.2.0 ( May 31, 2020 ) |
| operating system | OpenBSD , FreeBSD , Solaris , Linux , macOS , Windows |
| programming language | C , assembly language |
| category | Cryptography |
| License | BSD license |
| www.libressl.org | |
LibreSSL (sometimes also LibReSSL ) is a free implementation of the encryption protocol Transport Layer Security , originally Secure Sockets Layer (SSL).
The OpenBSD team led by Theo de Raadt created the fork LibreSSL in order to free the source code of the OpenSSL library from unneeded additional functions, redundant components (e.g. for memory management) and other legacy issues related to the operating system in the course of reading up on the Heartbleed security problem in OpenSSL . In doing so, the size of the source code of OpenSSL 1.0.1g was reduced. More than 90,000 lines of C code and 150,000 lines of additional content have been removed (as of May 21, 2014). The FIPS support has been removed. LibreSSL remained fully API compatible; all 8,700 ports supplied with OpenBSD can also be compiled with LibreSSL.
LibreSSL should initially be available for OpenBSD 5.6 and later ported to other platforms; Since the release of LibreSSL 2.0.0, the library can also be officially run on FreeBSD , Solaris , Linux and macOS . It replaces OpenSSL in Void Linux .
As part of the porting to Linux, a problem in the random number generator of the kernel became apparent in July 2014 , which led to controversy and ultimately to the implementation of a new system callertrandom () in the Linux kernel.
Web links
- Developer side (English)
- LibreSSL source code
- Problems and found other changes to OpenSSL documented by libressl developers (English)
Individual evidence
- ↑ Brent Cook: LibreSSL 3.2.0 Released . June 1, 2020 (accessed June 5, 2020).
- ↑ Brent Cook: Release 3.2.0 . May 31, 2020 (accessed August 19, 2020).
- ↑ The libressl Open Source Project on Open Hub: Languages Page . In: Open Hub . (accessed on July 14, 2018).
- ↑ LibreSSL: Great Advances in 30 Days.Retrieved May 21, 2014.
- ↑ Theo de Raadt: OpenSSL cannot be repaired. Accessed April 23, 2014.
- ↑ Bob Beck: First release of LibreSSL portable is available. July 11, 2014, accessed December 22, 2016 .
- ↑ People complaining about #LibreSSL PRNG ought to get their OS fixed to provide a decent entropy source instead. `` Must be that tall to ride '' , Retrieved July 31, 2014.
- ↑ PATCH, RFC random: introduce Getrandom (2) system call ( memento of the original from September 1, 2017 in the Internet Archive ) Info: The archive link was inserted automatically and has not yet been checked. Please check the original and archive link according to the instructions and then remove this notice. English, Retrieved July 31, 2014.
- ↑ LibreSSL: Linuxers and OpenBSDlers come together . Accessed July 31, 2014.
