YuOpenSSL-3.4: Version History

YuOpenSSL-3.4 Demo YuOpenSSL-3.3 Demo YuOpenSSL-3.0 Demo YuOpenSSL-1.1.1 Demo Buy License

YuOpenSSL is a Delphi port of the OpenSSL cryptography and SSL/TSL library. All code is statically compiled into applications. OpenSSL DLLs are not needed. Over 5000 functions, procedures, constants, and types are ready to use in a single Delphi unit.

YuOpenSSL-3.4 v1.0.0 – 21 Nov 2024

First release, based on OpenSSL 3.4.0.

Changes from OpenSSL 3.3:

Potentially significant or incompatible changes:

SHAKE-128 and SHAKE-256 implementations have no default digest length anymore. That means these algorithms cannot be used with EVP_DigestFinal / EVP_DigestFinal_ex unless the xoflen param is set before.
An empty renegotiate extension will be used in TLS client hellos instead of the empty renegotiation SCSV, for all connections with a minimum TLS version > 1.0.
Deprecation of SSL_SESSION_get_time, SSL_SESSION_set_time, and SSL_CTX_flush_sessions functions in favor of their respective …_ex functions SSL_SESSION_get_time_ex, SSL_SESSION_set_time_ex, and SSL_CTX_flush_sessions_ex which are Y2038-safe on platforms with Y2038-safe C_time_t.

New features:

Support for directly fetched composite signature algorithms such as RSA-SHA2-256 including new API functions.
Implementation of RFC 9579 (PBMAC1) in PKCS#12.
Support for integrity-only cipher suites TLS_SHA256_SHA256 and TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150.
Support for requesting CRL in CMP.
Support for additional X.509v3 extensions related to Attribute Certificates.
Initial Attribute Certificate (RFC 5755) support.
Possibility to customize ECC groups initialization to use precomputed values to save CPU time and use of this feature by the P-256 implementation.