Sveriges mest populära poddar
InfoSec Bites
Teknologi

OpenSSL: Architecture, Agility, and Quantum Resilience

31 min•14 oktober 2025

The discussion in this podcast provides an extensive audit of the OpenSSL 3.x toolkit, focusing on its architecture, strategic agility, and quantum resilience. It highlights that the shift to the modular Provider concept in OpenSSL 3.x is a critical evolution enabling cryptographic agility, particularly for the transition to Post-Quantum Cryptography (PQC) using hybrid key exchange schemes in TLS 1.3. The analysis identifies that historical failures, such as Heartbleed, stem primarily from low-level C memory safety issues and flaws in protocol state machine handling. Finally, it contrasts OpenSSL’s commitment to API stability and feature richness against security-focused forks like LibreSSL and infrastructure-specific forks like BoringSSL.

Fler avsnitt av InfoSec Bites

Visa alla avsnitt av InfoSec Bites
EPSS: Leveraging the Exploit Prediction Scoring System (EPSS) to Reduce Remediation Workloads
•36 min
Navigating the Modern Vulnerability Landscape: Leveraging CVSS v4.0, CISA Vulnrichment, and AWS-Native Intelligence
•48 min
NIST Privacy Framework and Regulatory Compliance
•33 min
NIST Container Security and Compliance Frameworks Guide
•40 min
A Guide to the NIST Risk Management Framework
•46 min
Logging Monitoring and Audit in Cloud Environment
•1 tim
Risk Assessment in Cyber Security
•36 min
Risk Governance in Cyber Security: Foundations and Frameworks
•46 min
Cloud Forensic : Trustworthiness of Digital Evidence in Cloud Environments
•49 min
VM Escape in Cloud: Hypervisor Security and the Evolution of Virtual Isolation
•1 tim 15 min

InfoSec Bites med HelloInfoSec finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.