OpenSSL 1.0.0 released [LWN.net]

OpenSSL 1.0.0 released

Posted Mar 30, 2010 0:09 UTC (Tue) by nix (subscriber, #2304)
Parent article: OpenSSL 1.0.0 released

So the API's stable now, right? All the damn macros are gone from the
headers, or guaranteed not to change in future?

(oh, and, GOST! Who would have thought the day would come when Soviet Cold
War-era top secret ciphers were being incorporated into free software! I'm
not sure how *useful* it is, but you must admit it's damn cool.)

OpenSSL 1.0.0 released

Posted Mar 30, 2010 4:16 UTC (Tue) by buck (subscriber, #55985) [Link]

i'd settle for some documentation, whatever the state of the API

OpenSSL 1.0.0 released

Posted Mar 30, 2010 6:13 UTC (Tue) by tetromino (subscriber, #33846) [Link] (1 responses)

> oh, and, GOST! Who would have thought the day would come when Soviet Cold War-era top secret ciphers were being incorporated into free software! I'm not sure how *useful* it is, but you must admit it's damn cool.

Actually, OpenSSL 1.0.0 incorporates not just GOST 28147-89 (the Cold War-era DES-like symmetric cipher that you are probably referring to), but also GOST R 34.10-94 (a 256-bit hash function released in 1994), GOST R 34.10-94 (a discrete logarithm digital signature algorithm released circa 1995) and GOST R 34.10-2001 (an elliptic curve cryptography upgrade of R 34.10-94 that was released in 2001).

Incorporating these algorithms into OpenSSL is useful because it allows open-source software to be used in systems where Russian authorities mandate the use of domestically developed encryption standards.

OpenSSL 1.0.0 released

Posted Mar 30, 2010 6:15 UTC (Tue) by tetromino (subscriber, #33846) [Link]

Typo: the hash function is GOST R 34.11-94.