OpenSSL A.00.09.08n.010, A.00.09.08n.011, and A.00.09.08n.012 release notes (5900-0899), June 2010

• Data Encryption Standard Extension (DESX)
• Rivest Cipher 2 (RC2)
• Rivest Cipher 4 (RC4)
Message digest
A message digest is a piece of data that can be used to verify that the contents of the message
has not been altered during transit. When a message is sent over a network, the sender computes
a message digest by performing a one-way hash function using a secret key known only to the
sender and recipient. The recipient also computes the message digest by performing the same
one-way hash function using the secret key. If the two message digests are identical, the recipient
can be sure that the message had not been modified during transit.
OpenSSL A.00.09.07m and A.00.09.08n support the following message digest algorithms:
• Hashed Message Authentication Code (HMAC)
• Message Digest 2 (MD2) algorithm (OpenSSL A.00.09.08n doesn’t support MD2 algorithm)
• Message Digest 4 (MD4) algorithm
• Message Digest 5 (MD5) algorithm
• RACE Integrity Primitives Evaluation Message Digest (RIPEMD) algorithm
• Secure Hash Algorithm (SHA)
• Secure Hash Algorithm 1 (SHA1)
• Secure Hash Algorithm 2 (SHA2)
NOTE: OpenSSL 0.9.8g and FIPS supports SHA2. OpenSSL 0.9.7m does not support SHA2
Public key encryption
Public-key encryption is an asymmetric encryption method that uses a public key and a private
key to encrypt and decrypt messages.
OpenSSL A.00.09.07m and A.00.09.08n support the following public key encryption methods:
• Rivest, Shamir, and Adleman (RSA) algorithm
• Digital Signature Algorithm (DSA)
• Diffie-Hellman (DH) algorithm
Certificates
A digital certificate is a file that uniquely identifies users and resources over a network.
OpenSSL A.00.09.07m and A.00.09.08n support the following digital certificates:
• X.509
• X.509 Version 3
• Certificate Revocation List (CRL)
Encoding
Before a message is sent over a network, the message is encoded such that the receiver can
understand the message. OpenSSL A.00.09.07m and A.00.09.08n support the following file formats
for encoding keys, certificates, and digitally signed files:
• Distinguished Encoding Rules (DER) – Stores Abstract Syntax Notation One (ASN.1)
structures containing keys and certificates.
• Privacy Enhanced Mail (PEM) – Stores keys, certificates, and encrypted files.
• Public-Key Cryptography Standard 7 (PKCS#7) – Stores digitally signed files.
What is in OpenSSL A.00.09.07m and A.00.09.08n 9