Blog

Foundation Business Advisory Committee election

Believe it or not, it’s time to start the election process for the 2026 Foundation Business Advisory Committee (FBAC). Advisory committees play a critical role in the governance of the OpenSSL Foundation. This committee focuses on the strategic direction of the OpenSSL Foundation and our mission.

Each of the six communities (Academics, Committers, Distributions, Individuals, Large Businesses and Small Businesses) will have a representative who will serve for one year. In addition to a monthly meeting, representatives also lead discussions on the Communities platform and generally promote the OpenSSL Mission.

Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

FIPS Validation

Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer of the OpenSSL Library, announce the submission of OpenSSL version 3.5.4 to the Cryptographic Module Validation Program (CMVP) for FIPS 140-3 validation.

This submission confirms that the code is complete and that all included algorithms have successfully passed NIST testing and independent laboratory review. The final CMVP review and certificate issuance remain as the last step in the process.

Release Announcement for OpenSSL 3.6.0

The final release of OpenSSL 3.6 is now live. We would like to thank all those who contributed to the OpenSSL 3.6 release, without whom the OpenSSL Library would not be possible.

Contributors to the OpenSSL Library (August 2025)

Among the 91 PRs approved in August, 6 were from people who hadn’t contributed to OpenSSL’s code base until now.

author date PR
zl523856 2025-08-03 [RISC-V] Further optimization for AES-128-CBC decryption performance
ChillerDragon 2025-08-04 Improve english in endian comment
ritoban23 2025-08-13 Fix potential null pointer dereference in pkey_dh_derive
vkryl 2025-08-15 Android: Enable 16 KB ELF alignment for arm64-v8a and x86_64 platforms
itot1198 2025-08-18 Remove unnecessary fetch-depth in GitHub Actions workflow
Leonabcd123 2025-08-28 Fixed typo

zl523856 started by submitting an issue that asking about the proposed change. The pull request includes some assembly code that improves the performance of the AES-128-CBC decryption algorithm on the RISC-V architecture. It’s not the sort of code that just anyone can write. Open source projects, such as OpenSSL, can benefit from one-time contributions of expertise. In turn, anyone who uses OpenSSL or products that include the library also benefit. It’s a beautiful thing.

Contributors to the OpenSSL Library (July 2025)

In July, 58 pull requests were approved for merge into the OpenSSL Library code base. There were also four people who contributed code for the first time:

So far in the development cycle of OpenSSL 3.6, the plurality of changes come from developers paid by either the OpenSSL Corporation or Foundation. But individual contributions continue to make up a large proportion of commits (41%) and overall changes (28%). Additionally individual committers also have done 18.5% of reviews so far.

Early Bird Registration is Now Open for the OpenSSL Conference 2025

Banner for Conference Early Bird

Early Bird registration is now open for the inaugural OpenSSL Conference, taking place from October 7 to 9, 2025, in Prague, Czech Republic. Take advantage of exclusive Early Bird rates and secure your spot now!

Join the global community of cryptographers, open-source innovators, security experts, and thought leaders who shape the future of secure communications. The OpenSSL Conference promises to be a landmark event, uniting diverse perspectives from across technical, enterprise, academic, and regulatory fields.