OpenSSL 3.2 Introduces Client-Side QUIC and SSL/TLS Security Level 2 as Default

OpenSSL 3.2, the latest major update to the widely-used cryptography and SSL/TLS project, has been released. This update brings numerous new features and improvements to the library.

Some of the key highlights of the OpenSSL 3.2 release include:

• The default SSL/TLS security level has been increased from 1 to 2, enhancing security for users.
• Support for client-side QUIC has been added, including multi-stream support. QUIC is a general-purpose transport layer network protocol initially developed by Google and later adopted by the IETF. While OpenSSL 3.2 only offers client-side QUIC support, the plan for OpenSSL 3.3~3.4 over the next year is to further enhance this QUIC implementation.
• The addition of support for Ed25519ctx, Ed25519ph, and Ed448p.
• Deterministic ECDSA signatures are now supported.
• TCP Fast Open is now supported on Linux, macOS, and FreeBSD where available.
• TLS certificate compression is now supported with Zlib, Brotli, and Zstd.
• On Windows, support has been added for using the Windows system certificate store as a source of trusted root certificates, although it is not enabled by default.
• Additional enhancements include support for SM4-XTS, AES-GCM-SIV, Argon2 KDF, Brainpool curves in TLS 1.3, TLS Raw Public Keys, and various other additions.

For downloads and further details on the OpenSSL 3.2 release, visit the official OpenSSL website .

Source: Phoronix .