Blog

Contributors to the OpenSSL Library (September 2025)

September has come and gone, so it’s past time to recognize new contributors to the OpenSSL Library:

author date PR
xiaoloudongfeng 2025-09-02 fix length of digestinfo_sm3_der
Pkeane22 2025-09-07 Fixed typo
LuiginoC 2025-09-10 crypto/evp/bio_ok.c:Integer Overflow in BIO_f_reliable record parser leads to Out-of-Bounds Read
ritesh006 2025-09-11 doc: clarify SSL_SESSION_get0_hostname notes
jedenastka 2025-09-11 Fix cipher protocol ID type in docs
leesugil 2025-09-14 FIPS 186-5 auxiliary prime length check condition updated (Fixed #28526)
rodeka 2025-09-16 crypto/ml_dsa: fix public_from_private() error path to return failure
jonathimer 2025-09-18 Add Linux Foundation Health Score badge to README
bleeqer 2025-09-29 ts_conf: fix memory leak in TS_CONF_set_policies

Here are more details on a sample of these pull requests.

We Celebrate the Success of the Inaugural OpenSSL Conference in Prague

OpenSSL Conference 2025

The OpenSSL Corporation and the OpenSSL Foundation celebrate the success of the inaugural OpenSSL Conference, held in Prague, October 7-9. This was the first time in the history of the OpenSSL Project that the full community met in person. Developers, legal experts, and users from academics, committers, distributions, individuals, large businesses, and small businesses came together to discuss project direction, share experience, and collaborate on the future of secure digital communication.

Foundation Business Advisory Committee election

Believe it or not, it’s time to start the election process for the 2026 Foundation Business Advisory Committee (FBAC). Advisory committees play a critical role in the governance of the OpenSSL Foundation. This committee focuses on the strategic direction of the OpenSSL Foundation and our mission.

Each of the six communities (Academics, Committers, Distributions, Individuals, Large Businesses and Small Businesses) will have a representative who will serve for one year. In addition to a monthly meeting, representatives also lead discussions on the Communities platform and generally promote the OpenSSL Mission.

Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

FIPS Validation

Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer of the OpenSSL Library, announce the submission of OpenSSL version 3.5.4 to the Cryptographic Module Validation Program (CMVP) for FIPS 140-3 validation.

This submission confirms that the code is complete and that all included algorithms have successfully passed NIST testing and independent laboratory review. The final CMVP review and certificate issuance remain as the last step in the process.

Release Announcement for OpenSSL 3.6.0

The final release of OpenSSL 3.6 is now live. We would like to thank all those who contributed to the OpenSSL 3.6 release, without whom the OpenSSL Library would not be possible.

Contributors to the OpenSSL Library (August 2025)

Among the 91 PRs approved in August, 6 were from people who hadn’t contributed to OpenSSL’s code base until now.

author date PR
zl523856 2025-08-03 [RISC-V] Further optimization for AES-128-CBC decryption performance
ChillerDragon 2025-08-04 Improve english in endian comment
ritoban23 2025-08-13 Fix potential null pointer dereference in pkey_dh_derive
vkryl 2025-08-15 Android: Enable 16 KB ELF alignment for arm64-v8a and x86_64 platforms
itot1198 2025-08-18 Remove unnecessary fetch-depth in GitHub Actions workflow
Leonabcd123 2025-08-28 Fixed typo

zl523856 started by submitting an issue that asking about the proposed change. The pull request includes some assembly code that improves the performance of the AES-128-CBC decryption algorithm on the RISC-V architecture. It’s not the sort of code that just anyone can write. Open source projects, such as OpenSSL, can benefit from one-time contributions of expertise. In turn, anyone who uses OpenSSL or products that include the library also benefit. It’s a beautiful thing.