OpenSSL A.00.09.08q.001, A.00.09.08q.002, and A.00.09.08q.003 release notes (5900-1560, February 2011)

• Data Encryption Standard (DES)
CAUTION: DES has been cracked (data encoded by DES has been decoded by a third
party). HP recommends that you use DES only when you are required to do so for compatibility
reasons or because of legal restrictions.
• Triple Data Encryption Standard (3DES)
• Data Encryption Standard Extension (DESX)
• Rivest Cipher 2 (RC2)
• Rivest Cipher 4 (RC4)
Message digest
A message digest is a piece of data that can be used to verify that the contents of the message
has not been altered during transit. When a message is sent over a network, the sender computes
a message digest by performing a one-way hash function using a secret key known only to the
sender and recipient. The recipient also computes the message digest by performing the same
one-way hash function using the secret key. If the two message digests are identical, the recipient
can be sure that the message had not been modified during transit.
OpenSSL A.00.09.07m and A.00.09.08q support the following message digest algorithms:
• Hashed Message Authentication Code (HMAC)
• Message Digest 2 (MD2) algorithm
• Message Digest 4 (MD4) algorithm
• Message Digest 5 (MD5) algorithm
• RACE Integrity Primitives Evaluation Message Digest (RIPEMD) algorithm
• Secure Hash Algorithm (SHA)
• Secure Hash Algorithm 1 (SHA1)
• Secure Hash Algorithm 2 (SHA2)
NOTE: OpenSSL 0.9.8q and FIPS supports SHA2. OpenSSL 0.9.7m does not support SHA2
Public key encryption
Public-key encryption is an asymmetric encryption method that uses a public key and a private key
to encrypt and decrypt messages.
OpenSSL A.00.09.07m and A.00.09.08q support the following public key encryption methods:
• Rivest, Shamir, and Adleman (RSA) algorithm
• Digital Signature Algorithm (DSA)
• Diffie-Hellman (DH) algorithm
Certificates
A digital certificate is a file that uniquely identifies users and resources over a network.
OpenSSL A.00.09.07m and A.00.09.08q support the following digital certificates:
• X.509
• X.509 Version 3
• Certificate Revocation List (CRL)
6 OpenSSL A.00.09.08q.001, A.00.09.08q.002, and A.00.09.08q.003