The OpenSSL Project has released OpenSSL 4.1.0 Alpha1, an early preview of its upcoming feature release. This update includes support for Datagram Transport Layer Security (DTLS) 1.3, GREASE for more resilient TLS deployments, and architecture-specific performance enhancements for post-quantum cryptography operations. A key addition in OpenSSL 4.1.0 Alpha1 is support for DTLS 1.3, which secures UDP-based communications essential for real-time applications such as video calls, online gaming, and IoT devices.
This implementation conforms to RFC 9147, offering TLS-like security while addressing UDP's packet loss and reordering issues. Enhancements for Number Theoretic Transform operations on specific architectures are crucial for enterprises involved in post-quantum TLS, certificate workflows, and high-volume cryptographic services.
Optimizations for x86_64 systems include AVX-512 for SHAKE x4 operations, enhancing signature generation and verification performance. Additionally, GREASE (RFC 8701) is introduced, helping identify and fix compatibility issues with network devices and TLS implementations that reject unknown protocol values. The updated tsget utility now employs Net::Curl::Easy in place of the abandoned WWW::Curl::Easy to prevent dependency issues.
