The OpenSSL project released version 4.1 on October 23, introducing support for the DTLS 1.3 protocol. This update aims to enhance data security for UDP-based communications, including real-time audio and video streaming, gaming, and IoT devices, by providing encryption mechanisms similar to TLS 1.3.
The new version implements the GREASE mechanism as defined in RFC 8701. By inserting random values into protocol negotiations, it prevents dependencies on fixed parameters and reduces compatibility risks for future protocol extensions.
Performance optimizations for post-quantum cryptography are included in this release. These updates feature improved number-theoretic transform operations for ML-DSA and ML-KEM on PPC64LE, faster ML-DSA on x86-64, and AVX-512 optimizations for SHAKE x4 and AES-CBC decryption.
The API layer now includes DTLS support for SSL listeners and adds IKEv2 key derivation function support. Additionally, OpenSSL 4.1 introduces preliminary support for the Elbrus2000 architecture while removing build targets for Windows CE and Itanium.
