https://research.openssl.org/ News from the OpenSSL Foundation and the OpenSSL Corporation. en Wed, 30 Sep 2026 00:00:00 +0000 https://openssl.foundation/news/welcoming-our-2026-openssl-conference-scholarship-recipients https://openssl.foundation/news/welcoming-our-2026-openssl-conference-scholarship-recipients Wed, 30 Sep 2026 00:00:00 +0000 Foundation OpenSSL Foundation welcomes 15 scholarship recipients to OpenSSL Conference 2026 in Prague, October 13–15. https://openssl.foundation/news/introducing-the-foundation-advisory-committee https://openssl.foundation/news/introducing-the-foundation-advisory-committee Fri, 18 Sep 2026 00:00:00 +0000 Foundation Now that the voting is over, we're proud to introduce the Foundation Advisory Committee. https://openssl.foundation/news/one-year-later-how-ciscos-support-fueled-openssl-foundations-mission https://openssl.foundation/news/one-year-later-how-ciscos-support-fueled-openssl-foundations-mission Thu, 10 Sep 2026 00:00:00 +0000 Foundation Celebrating one year of Cisco’s Premier Sponsorship and the engineering capacity, collaboration, and progress it has made possible. https://openssl.foundation/news/2026-foundation-advisory-committee-election-has-started https://openssl.foundation/news/2026-foundation-advisory-committee-election-has-started Wed, 09 Sep 2026 00:00:00 +0000 Foundation Reminder to vote on the 2026 Foundation Advisory Committee election https://openssl-corporation.org/blog/historical-list-compliance.html https://openssl-corporation.org/blog/historical-list-compliance.html Fri, 14 Aug 2026 00:00:00 +0000 Corporation On 21 September 2026 the remaining FIPS 140-2 certificates move to the CMVP Historical List. A procurement cut-off, not an expiry: what changes for new and existing systems, and why validated is not the same as compliant. https://openssl-corporation.org/blog/cra-crypto-dependencies.html https://openssl-corporation.org/blog/cra-crypto-dependencies.html Fri, 14 Aug 2026 00:00:00 +0000 Corporation The Cyber Resilience Act covers your whole product, cryptography dependency included. What it asks of a product that ships the OpenSSL Library, why the special treatment for open source does not extend to shipping it, and how a supported dependency makes the obligations deliverable. https://openssl-corporation.org/blog/fips-140-3-migration.html https://openssl-corporation.org/blog/fips-140-3-migration.html Fri, 14 Aug 2026 00:00:00 +0000 Corporation OpenSSL 3.0 reached end of life on 7 September and the FIPS 140-2 certificates go Historical on 21 September. One migration covers both: the 3.5 LTS line plus the FIPS 140-3 provider, in five steps, and how to get a certificate in your own name. https://openssl-corporation.org/blog/windows-installer.html https://openssl-corporation.org/blog/windows-installer.html Fri, 14 Aug 2026 00:00:00 +0000 Corporation For the first time in the Library's history, an official Windows installer. Signed binaries, two variants, an optional FIPS provider, released for testing on GitHub. We'd like you to break it before the stable release ships. https://openssl-corporation.org/blog/card-check-ceremonies.html https://openssl-corporation.org/blog/card-check-ceremonies.html Wed, 12 Aug 2026 00:00:00 +0000 Corporation The keys that sign OpenSSL releases live inside Entrust nShield HSMs, guarded by quorums of smart cards. Why we check every card monthly, and the small tool we built to run the checks. https://openssl.foundation/news/foundation-advisory-committee-nominations-and-election-2026 https://openssl.foundation/news/foundation-advisory-committee-nominations-and-election-2026 Tue, 04 Aug 2026 00:00:00 +0000 Foundation Announcing the 2026 Advisory Committee election https://openssl-corporation.org/blog/post-quantum-cryptography-now-has-deadlines.html https://openssl-corporation.org/blog/post-quantum-cryptography-now-has-deadlines.html Wed, 29 Jul 2026 00:00:00 +0000 Corporation Three US documents in three days converted the post-quantum transition from guidance into obligations. The full map of migration deadlines, and why the practical dates arrive years before the printed ones. https://openssl.foundation/news/combined-foundation-advisory-committee-election-schedule https://openssl.foundation/news/combined-foundation-advisory-committee-election-schedule Wed, 22 Jul 2026 00:00:00 +0000 Foundation OpenSSL Foundation is moving to a single combined advisory committee, with community elections running September 1 to 14. Nominations open in August. Learn the full timeline and how to get involved. https://openssl-corporation.org/blog/fips-140-2-sunsets-september-2026.html https://openssl-corporation.org/blog/fips-140-2-sunsets-september-2026.html Thu, 16 Jul 2026 00:00:00 +0000 Corporation Two fixed dates in September 2026 close out FIPS 140-2 for users of the OpenSSL FIPS Provider. The validated FIPS 140-3 replacement is available now, and the dates do not move. https://openssl.foundation/news/come-to-the-conference-get-a-game https://openssl.foundation/news/come-to-the-conference-get-a-game Thu, 16 Jul 2026 00:00:00 +0000 Foundation The OpenSSL Foundation's new board game, Post Quantum Trails, simulates the race to build post-quantum cryptography before Q-Day. Grab a free copy at the OpenSSL Conference this October in Prague. https://openssl.foundation/news/is-hosting-joins-openssl-foundations-code-protectors-program https://openssl.foundation/news/is-hosting-joins-openssl-foundations-code-protectors-program Thu, 09 Jul 2026 00:00:00 +0000 Foundation A hosting provider's investment in critical open-source security https://openssl.foundation/news/are-you-ready-for-q-day https://openssl.foundation/news/are-you-ready-for-q-day Wed, 08 Jul 2026 00:00:00 +0000 Foundation Quantum computing has the potential to transform cybersecurity by breaking today’s widely used encryption methods. Learn what Q-Day is, why it matters, how OpenSSL supports post-quantum cryptography, and the practical steps developers and organizations can take now to prepare. https://openssl-corporation.org/blog/hybrid-by-default.html https://openssl-corporation.org/blog/hybrid-by-default.html Mon, 06 Jul 2026 00:00:00 +0000 Corporation The IETF has been deciding whether to publish a document describing standalone ML-KEM in TLS 1.3. The argument is loud. Our position is not. https://openssl.foundation/news/our-experience-at-devconf-cz-2026 https://openssl.foundation/news/our-experience-at-devconf-cz-2026 Wed, 01 Jul 2026 00:00:00 +0000 Foundation Reflections from DevConf.CZ 2026 in Brno, Czech Republic https://openssl.foundation/news/openssl-foundation-in-dublin https://openssl.foundation/news/openssl-foundation-in-dublin Thu, 25 Jun 2026 00:00:00 +0000 Foundation The OpenSSL Foundation management team gathered in Dublin for strategic planning, team collaboration, and discussions on the future of secure communications. https://openssl-corporation.org/blog/devconf-2026-recap.html https://openssl-corporation.org/blog/devconf-2026-recap.html Fri, 19 Jun 2026 00:00:00 +0000 Corporation The people who write and maintain the world’s most widely used cryptographic library left the commit log behind, set up a stand at DevConf.cz, and spent two days answering the community’s hardest questions in person.