OpenSSL (English Wikipedia)

Tarreau, Willy (October 27, 2021). "[Pkg-openssl-devel] Any intent to maintain quictls ?". Archived from the original on December 7, 2024. Retrieved February 25, 2023.

archlinux.org (Global: low place; English: low place)

bbs.archlinux.org

"openssl version 3.0 in arch? / Newbie Corner / Arch Linux Forums". bbs.archlinux.org. Archived from the original on May 16, 2024. Retrieved February 25, 2023.

arstechnica.com (Global: 473^rd place; English: 338^th place)

Goodlin, Dan (January 28, 2016). "High-severity bug in OpenSSL allows attackers to decrypt HTTPS traffic". Ars Technica. Archived from the original on November 20, 2016. Retrieved June 14, 2017.
"Google unveils independent 'fork' of OpenSSL called 'BoringSSL'". Ars Technica. June 21, 2014. Archived from the original on June 23, 2014. Retrieved June 14, 2017.

chromium.org (Global: 9,404^th place; English: 9,224^th place)

bugs.chromium.org

"221 - boringssl - A fork of OpenSSL that is designed to meet Google's needs - Monorail". bugs.chromium.org.

cisco.com (Global: 5,047^th place; English: 3,553^rd place)

tools.cisco.com

"OpenSSL ASN.1 asn1_d2i_read_bio() Heap Overflow Vulnerability". Cisco. Archived from the original on June 10, 2016. Retrieved May 9, 2016.

climm.org (Global: low place; English: low place)

"Releases of source and binaries". climm.org. Archived from the original on February 12, 2011. Retrieved November 30, 2010.

comodo.com (Global: low place; English: low place)

blogs.comodo.com

"OpenSSL Updates Fix Critical Security Vulnerabilities". August 9, 2014. Archived from the original on August 26, 2014. Retrieved August 25, 2014.

coreinfrastructure.org (Global: low place; English: low place)

"OpenSSL Re-licensing to Apache License v. 2.0 To Encourage Broader Use with Other FOSS Projects and Products". March 23, 2017. Archived from the original on July 18, 2017. Retrieved August 6, 2018.

cyberoam.com (Global: low place; English: low place)

"OpenSSL continues to bleed out more flaws – more critical vulnerabilities found". Cyberoam Threat Research Labs. 2014. Archived from the original on June 19, 2014. Retrieved June 13, 2014.

dbta.com (Global: low place; English: low place)

Wells, Joyce (August 3, 2017). "Oracle, SafeLogic and OpenSSL Join Forces to Update FIPS Module". Database Trends and Applications.

debian.org (Global: 3,258^th place; English: 2,984^th place)

wiki.debian.org

"SSLkeys". Debian Wiki. Retrieved June 19, 2015.

debian.org

"DSA-1571-1 openssl – predictable random number generator". Debian Project. May 13, 2008. Archived from the original on March 9, 2011. Retrieved August 5, 2012.

deluge-torrent.org (Global: low place; English: low place)

git.deluge-torrent.org

"Deluge LICENSE file". deluge-torrent.org. Archived from the original on December 3, 2013. Retrieved January 24, 2013.

doi.org (Global: 2^nd place; English: 2^nd place)

R. Seggelmann; M. Tuexen; M. Williams (February 2012). Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension. Internet Engineering Task Force. doi:10.17487/RFC6520. ISSN 2070-1721. RFC 6520. Proposed Standard. Updated by RFC 8447.
E. Rescorla (January 2010). Keying Material Exporters for Transport Layer Security (TLS). Internet Engineering Task Force. doi:10.17487/RFC5705. ISSN 2070-1721. RFC 5705. Proposed Standard. Updated by RFC 8446 and 8447.
D. McGrew; E. Rescorla (May 2010). Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP). Internet Engineering Task Force. doi:10.17487/RFC5764. ISSN 2070-1721. RFC 5764. Proposed Standard. Updated by RFC 7983 and 9443.
J-P. Aumasson (October 2015). M-J. Saarinen (ed.). The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Independent Submission. doi:10.17487/RFC7693. ISSN 2070-1721. RFC 7693. Informational.
Y. Nir; A. Langley (June 2018). ChaCha20 and Poly1305 for IETF Protocols. Internet Research Task Force. doi:10.17487/RFC8439. ISSN 2070-1721. RFC 8439. Informational. Obsoletes RFC 7539.
A. Langley; M. Hamburg; S. Turner (January 2016). Elliptic Curves for Security. Internet Engineering Task Force. doi:10.17487/RFC7748. ISSN 2070-1721. RFC 7748. Informational.
B. Kaliski; A. Rusch; J. Johnsson; A. Rusch (November 2016). K. Moriarty (ed.). PKCS #1: RSA Cryptography Specifications Version 2.2. Internet Engineering Task Force. doi:10.17487/RFC8017. ISSN 2070-1721. RFC 8017. Informational. Obsoletes RFC 3447.
A. Ghedini; V. Vasiliev (December 2020). TLS Certificate Compression. Internet Engineering Task Force. doi:10.17487/RFC8879. ISSN 2070-1721. RFC 8879. Proposed Standard.
T. Pornin (August 2013). Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA). Independent Submission. doi:10.17487/RFC6979. ISSN 2070-1721. RFC 6979. Informational.
J. Gilmore; S. Weiler; T. Kivinen (June 2014). P. Wouters; H. Tschofenig (eds.). Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Internet Engineering Task Force. doi:10.17487/RFC7250. ISSN 2070-1721. RFC 7250. Proposed Standard.

eset.com (Global: low place; English: low place)

forum.eset.com

"ESET Management Agent (RHEL 9.x, OpenSSL 3.0.x)". ESET Security Forum. June 6, 2022. Archived from the original on December 9, 2024. Retrieved February 25, 2023.

eweek.com (Global: 8,041^st place; English: 5,594^th place)

Kerner, Sean Michael (August 4, 2017). "Oracle Joins SafeLogic to Develop FIPS Module for OpenSSL Security". eWeek.

exploit-db.com (Global: low place; English: low place)

"Debian OpenSSL – Predictable PRNG Bruteforce SSH Exploit Python". Exploits Database. June 1, 2008. Archived from the original on February 6, 2025. Retrieved August 12, 2015.

fedscoop.com (Global: low place; English: low place)

Waterman, Shaun (July 21, 2016). "SafeLogic saves the day for feds' use of OpenSSL". FedScoop.

freedomhacker.net (Global: low place; English: low place)

"OpenSSL Patches Severe Denial-of-Service Vulnerability". Brandon Stosh. March 20, 2015. Archived from the original on April 2, 2015. Retrieved March 20, 2015.

fsf.org (Global: 8,097^th place; English: low place)

"Licenses – Free Software Foundation". fsf.org. Archived from the original on January 24, 2008. Retrieved January 4, 2008.

gcn.com (Global: low place; English: low place)

"NIST recertifies open source encryption module". gcn.com. Archived from the original on October 10, 2007.
Schneider, Troy K. (July 20, 2016). "Getting government approval of a more secure OpenSSL". GCN: Technology, Tools, and Tactics for Public Sector IT. Archived from the original on May 9, 2021. Retrieved October 29, 2020.

github.com (Global: 380^th place; English: 337^th place)

"OpenSSL 4.0.1". June 9, 2026. Retrieved June 10, 2026.
"OpenSSL Releases". GitHub. Retrieved December 6, 2022.
"OpenSSL 0.9.x series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 1.0.0 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 1.0.1 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 1.0.2 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 1.1.0 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 1.1.1 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 3.0 series notes". GitHub. Retrieved December 6, 2022.
"OpenSSL 3.1 series notes". GitHub. Retrieved March 15, 2023.
"OpenSSL 3.2 series notes". GitHub. Retrieved November 24, 2023.
"OpenSSL source code, directory crypto/whrlpool". GitHub. Archived from the original on February 17, 2019. Retrieved August 29, 2017.
"Agglomerated SSL". GitHub. September 7, 2010. Archived from the original on December 9, 2024. Retrieved December 9, 2024.
"AWS-LC is a general-purpose cryptographic library". GitHub. September 4, 2020. Retrieved December 8, 2024.
"The official repository for the QuicTLS project". GitHub. May 7, 2025. Retrieved May 7, 2025.
"OpenSSL 3 breaks webpack build · Issue #22305 · brave/brave-browser". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"OpenSSL 3.0 Compatibility · Issue #597 · nginx/unit". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Massive performance degradation in OpenSsl 3.0 if used in a heavy multi threaded server application · Issue #17064 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Performance issue with Openssl 3.0 in multi threaded application when using d2i_x509 · Issue #17950 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Severe efficiency degradation of credential loading in comparison to 1.1.1 · Issue #18814 · openssl/openssl". GitHub. Archived from the original on December 7, 2024. Retrieved February 25, 2023.
"3.0 performance degraded due to locking · Issue #20286 · openssl/openssl". GitHub.
"High cpu usage for outbound ssl requests after upgrading from v16.15.0 to v18.1.0 · Issue #43128 · nodejs/node". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Massive performance degradation in OpenSsl 3.0 FIPS provider · Issue #18472 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Performance measurements · Issue #16791 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"PEM/DER decoding of PKCS8 RSA private keys are 80 times slower in 3.0 · Issue #15199 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"3.0 Performance problems · Issue #17627 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"WIP: master QUIC support by tmshort · Pull Request #8797 · openssl/openssl". GitHub. Archived from the original on January 21, 2025. Retrieved February 25, 2023.
"HTTP/3 support · Issue #680 · haproxy/haproxy". GitHub. Archived from the original on December 7, 2024. Retrieved February 25, 2023.

gitlab.com (Global: low place; English: low place)

"Support QUIC TLS API (#826) · Issues · gnutls / GnuTLS · GitLab". GitLab. September 4, 2019. Archived from the original on December 8, 2024. Retrieved February 25, 2023.

googleonlinesecurity.blogspot.com.au (Global: low place; English: low place)

"Protecting data for the long term with forward secrecy". Archived from the original on March 4, 2016. Retrieved November 5, 2012.

googlesource.com (Global: low place; English: low place)

boringssl.googlesource.com

"BoringSSL". Git at Google. Archived from the original on February 17, 2018. Retrieved December 28, 2015.

groups.google.com (Global: 2,153^rd place; English: 1,445^th place)

"Compile against OpenSSL 3.X". groups.google.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Bug#1011391: openssl: please support quictls patchset". groups.google.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.

haxx.se (Global: low place; English: low place)

daniel.haxx.se

"The QUIC API OpenSSL will not provide | daniel.haxx.se". October 25, 2021. Archived from the original on January 21, 2025. Retrieved February 25, 2023.

heartbleed.com (Global: low place; English: low place)

Codenomicon Ltd (April 8, 2014). "Heartbleed Bug". Archived from the original on April 7, 2014. Retrieved April 8, 2014.

ietf.org (Global: 731^st place; English: 625^th place)

datatracker.ietf.org

R. Seggelmann; M. Tuexen; M. Williams (February 2012). Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension. Internet Engineering Task Force. doi:10.17487/RFC6520. ISSN 2070-1721. RFC 6520. Proposed Standard. Updated by RFC 8447.
E. Rescorla (January 2010). Keying Material Exporters for Transport Layer Security (TLS). Internet Engineering Task Force. doi:10.17487/RFC5705. ISSN 2070-1721. RFC 5705. Proposed Standard. Updated by RFC 8446 and 8447.
D. McGrew; E. Rescorla (May 2010). Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP). Internet Engineering Task Force. doi:10.17487/RFC5764. ISSN 2070-1721. RFC 5764. Proposed Standard. Updated by RFC 7983 and 9443.
J-P. Aumasson (October 2015). M-J. Saarinen (ed.). The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Independent Submission. doi:10.17487/RFC7693. ISSN 2070-1721. RFC 7693. Informational.
Y. Nir; A. Langley (June 2018). ChaCha20 and Poly1305 for IETF Protocols. Internet Research Task Force. doi:10.17487/RFC8439. ISSN 2070-1721. RFC 8439. Informational. Obsoletes RFC 7539.
A. Langley; M. Hamburg; S. Turner (January 2016). Elliptic Curves for Security. Internet Engineering Task Force. doi:10.17487/RFC7748. ISSN 2070-1721. RFC 7748. Informational.
B. Kaliski; A. Rusch; J. Johnsson; A. Rusch (November 2016). K. Moriarty (ed.). PKCS #1: RSA Cryptography Specifications Version 2.2. Internet Engineering Task Force. doi:10.17487/RFC8017. ISSN 2070-1721. RFC 8017. Informational. Obsoletes RFC 3447.
A. Ghedini; V. Vasiliev (December 2020). TLS Certificate Compression. Internet Engineering Task Force. doi:10.17487/RFC8879. ISSN 2070-1721. RFC 8879. Proposed Standard.
T. Pornin (August 2013). Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA). Independent Submission. doi:10.17487/RFC6979. ISSN 2070-1721. RFC 6979. Informational.
J. Gilmore; S. Weiler; T. Kivinen (June 2014). P. Wouters; H. Tschofenig (eds.). Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Internet Engineering Task Force. doi:10.17487/RFC7250. ISSN 2070-1721. RFC 7250. Proposed Standard.
Thomson, Martin; Turner, Sean (January 14, 2017). "Using Transport Layer Security (TLS) to Secure QUIC". Archived from the original on December 8, 2024. Retrieved November 27, 2023 – via IETF.

imperialviolet.org (Global: low place; English: low place)

"BoringSSL". Adam Langley's Weblog. June 20, 2014. Archived from the original on June 1, 2018. Retrieved September 22, 2015.

infoworld.com (Global: 5,156^th place; English: 3,760^th place)

Rashid, Fahmida Y. (July 26, 2016). "Reworked OpenSSL on track for government validation". InfoWorld.

ipsec.pl (Global: low place; English: low place)

"Why Heartbleed is dangerous? Exploiting CVE-2014-0160". IPSec.pl. 2014. Archived from the original on April 8, 2014. Retrieved April 8, 2014.

mail-archive.com (Global: low place; English: low place)

"OMC Release Requirements". www.mail-archive.com. Archived from the original on January 21, 2025. Retrieved February 25, 2023.

marc.info (Global: low place; English: low place)

Laurie, Ben (January 6, 1999). "Announce: OpenSSL (Take 2)". ssl-users (Mailing list). Archived from the original on March 23, 2019. Retrieved October 29, 2018.

medium.com (Global: 651^st place; English: 479^th place)

Buchanan, Bill (August 30, 2018). "Goodbye OpenSSL, and Hello To Google Tink". Medium. Retrieved April 4, 2019.

mitre.org (Global: low place; English: low place)

cve.mitre.org

"CVE-2014-0224". CVE. 2014. Archived from the original on August 1, 2014. Retrieved June 13, 2014.

netcraft.com (Global: low place; English: low place)

news.netcraft.com

Mutton, Paul (April 8, 2014). "Half a million widely trusted websites vulnerable to Heartbleed bug". Netcraft Ltd. Archived from the original on November 19, 2014. Retrieved April 8, 2014.

nist.gov (Global: 708^th place; English: 742^nd place)

csrc.nist.gov

"Cryptographic Module Validation Program Certificate #1747". Computer Security Resource Center. October 11, 2016.
"Cryptographic Module Validation Program Certificate #2398". Computer Security Resource Center. October 11, 2016. Archived from the original on October 26, 2020. Retrieved October 29, 2020.
"Cryptographic Module Validation Program Certificate #2473". Computer Security Resource Center. October 11, 2016.
"Cryptographic Module Validation Program search results". Computer Security Resource Center. October 11, 2016.
"Cryptographic Module Validation Program search results". Computer Security Resource Center. October 11, 2016.
"Cryptographic Module Validation Program: OpenSSL". Computer Security Resource Center. October 11, 2016. Archived from the original on April 14, 2021. Retrieved September 24, 2021.

opensource.com (Global: low place; English: low place)

Lee, Victoria; Radcliffe, Mark; Stevenson, Chris (5 February 2019). "Top 10 FOSS legal developments of 2018". Opensource.com, Red Hat. Archived from the original on 5 February 2019. Retrieved 28 September 2019. The OpenSSL project announced that it had completed its shift from the OpenSSL/SSLeay license to the Apache Software License version 2 (ASLv2).

openssl-corporation.org (Global: low place; English: low place)

"OpenSSL Annual Report 2024" (PDF).
"OpenSSL 3.4 Final Release". OpenSSL Blog. October 22, 2024. Archived from the original on December 8, 2024. Retrieved November 22, 2024.

openssl-library.org (Global: low place; English: low place)

Matt Caswell (November 28, 2018). "The Holy Hand Grenade of Antioch". OpenSSL Blog. Retrieved October 11, 2024.
"New Committers". OpenSSL Software Foundation. May 20, 2019. Archived from the original on October 14, 2024. Retrieved October 11, 2024.
"OpenSSL Library – Release Strategy". OpenSSL Software Foundation. Archived from the original on December 9, 2024. Retrieved August 1, 2024.
Caswell, Matt (September 11, 2018). "OpenSSL 1.1.1 Is Released". OpenSSL Blog. OpenSSL Foundation. Retrieved October 11, 2024.
Caswell, Matt (February 8, 2018). "Using TLS1.3 With OpenSSL". OpenSSL Blog. OpenSSL Foundation. Retrieved October 11, 2024.
"OpenSSL 3.0 Has Been Released!". OpenSSL Blog. September 7, 2021. Retrieved October 11, 2024.
"OpenSSL 3.1 Final Release". OpenSSL Blog. March 7, 2023. Retrieved October 11, 2024.
"OpenSSL 3.2.0 Final Release". OpenSSL Blog. November 23, 2023. Archived from the original on December 7, 2024. Retrieved October 11, 2024.
"OpenSSL 3.2 End Of Life". OpenSSL Blog. November 25, 2025. Retrieved April 14, 2026.
"OpenSSL 3.3 Final Release". OpenSSL Blog. April 10, 2024. Retrieved October 11, 2024.
"OpenSSL 3.5 Final Release". OpenSSL Blog. April 8, 2025. Archived from the original on April 25, 2025. Retrieved April 28, 2025.
"Release Announcement for OpenSSL 3.6.0". OpenSSL Blog. October 1, 2025. Retrieved April 14, 2026.
"OpenSSL 4.0 Final Release - Live". OpenSSL Blog. April 14, 2026. Retrieved April 14, 2026.
"Update on 3.0 Development, FIPS and 1.0.2 EOL". OpenSSL Blog. November 7, 2019. Retrieved October 11, 2024.
"OpenSSL 3.0 Alpha7 Release". OpenSSL Blog. October 20, 2020. Archived from the original on October 14, 2024. Retrieved October 11, 2024.
Salz, Rich (August 1, 2015). "License Agreements and Changes Are Coming". openssl.org. Retrieved October 11, 2024.
"QUIC and OpenSSL". OpenSSL Blog. February 17, 2020. Retrieved October 11, 2024.

openssl.org (Global: low place; English: low place)

openssl.org

"/source/license.html". www.openssl.org. Archived from the original on January 18, 2019. Retrieved March 3, 2021.
"OpenSSL Management Committee". OpenSSL Software Foundation. Archived from the original on July 22, 2018. Retrieved November 3, 2019.
"OpenSSL Committers". OpenSSL Software Foundation. Archived from the original on July 22, 2018. Retrieved November 3, 2019.
"OpenSSL – Changelog". OpenSSL Software Foundation. Archived from the original on September 13, 2016. Retrieved September 26, 2016.
"FIPS-140". openssl.org. Retrieved November 12, 2019.
"OpenSSL User Guide for the OpenSSL FIPS Object Module v2.0" (PDF). openssl.org. March 14, 2017. Archived (PDF) from the original on June 9, 2020. Retrieved November 12, 2019.
"OpenSSL: Source, License". openssl.org. Archived from the original on January 18, 2019. Retrieved February 5, 2015.
"ASN1 BIO vulnerability". OpenSSL. Archived from the original on March 2, 2015. Retrieved February 5, 2015.
OpenSSL.org (April 7, 2014). "OpenSSL Security Advisory [07 Apr 2014]". Archived from the original on April 8, 2014. Retrieved April 9, 2014.
OpenSSL (April 7, 2014). "TLS heartbeat read overrun (CVE-2014-0160)". Archived from the original on April 8, 2014. Retrieved April 8, 2014.
"OpenSSL Security Advisory". OpenSSL. June 5, 2014. Archived from the original on April 30, 2024. Retrieved June 13, 2014.

mta.openssl.org

Marquess, Steve (January 19, 2017). "Akamai sponsors TLS 1.3". openssl-announce (Mailing list). Archived from the original on February 1, 2017. Retrieved November 9, 2018.

cvs.openssl.org

"GOST engine OpenSSL 1.0.0 README". cvs.openssl.org.{{cite web}}: CS1 maint: deprecated archival service (link)

wiki.openssl.org

"OpenSSL 3.0 License Change". September 22, 2021. Archived from the original on January 17, 2025. Retrieved September 24, 2021.

ports.su (Global: low place; English: low place)

"security/assl: assl-1.5.0p0v0 – hide awful SSL API in a sane interface". OpenBSD ports. May 22, 2014. Archived from the original on February 10, 2015. Retrieved February 10, 2015.

python.org (Global: 4,399^th place; English: 3,941^st place)

discuss.python.org

"Our future with OpenSSL". Discussions on Python.org. November 28, 2022. Archived from the original on February 25, 2023. Retrieved February 25, 2023.

bugs.python.org

"Issue 46313: SSLObject does not raise SSLEOFError on OpenSSL 3 - Python tracker". bugs.python.org. Archived from the original on December 8, 2024. Retrieved February 25, 2023.

redhat.com (Global: 6,005^th place; English: 4,993^rd place)

"The experience of bringing OpenSSL 3.0 into Red Hat Enterprise Linux and Fedora". www.redhat.com.

rfc-editor.org (Global: 747^th place; English: 325^th place)

R. Seggelmann; M. Tuexen; M. Williams (February 2012). Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension. Internet Engineering Task Force. doi:10.17487/RFC6520. ISSN 2070-1721. RFC 6520. Proposed Standard. Updated by RFC 8447.
E. Rescorla (January 2010). Keying Material Exporters for Transport Layer Security (TLS). Internet Engineering Task Force. doi:10.17487/RFC5705. ISSN 2070-1721. RFC 5705. Proposed Standard. Updated by RFC 8446 and 8447.
D. McGrew; E. Rescorla (May 2010). Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP). Internet Engineering Task Force. doi:10.17487/RFC5764. ISSN 2070-1721. RFC 5764. Proposed Standard. Updated by RFC 7983 and 9443.
J-P. Aumasson (October 2015). M-J. Saarinen (ed.). The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Independent Submission. doi:10.17487/RFC7693. ISSN 2070-1721. RFC 7693. Informational.
Y. Nir; A. Langley (June 2018). ChaCha20 and Poly1305 for IETF Protocols. Internet Research Task Force. doi:10.17487/RFC8439. ISSN 2070-1721. RFC 8439. Informational. Obsoletes RFC 7539.
A. Langley; M. Hamburg; S. Turner (January 2016). Elliptic Curves for Security. Internet Engineering Task Force. doi:10.17487/RFC7748. ISSN 2070-1721. RFC 7748. Informational.
B. Kaliski; A. Rusch; J. Johnsson; A. Rusch (November 2016). K. Moriarty (ed.). PKCS #1: RSA Cryptography Specifications Version 2.2. Internet Engineering Task Force. doi:10.17487/RFC8017. ISSN 2070-1721. RFC 8017. Informational. Obsoletes RFC 3447.
A. Ghedini; V. Vasiliev (December 2020). TLS Certificate Compression. Internet Engineering Task Force. doi:10.17487/RFC8879. ISSN 2070-1721. RFC 8879. Proposed Standard.
T. Pornin (August 2013). Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA). Independent Submission. doi:10.17487/RFC6979. ISSN 2070-1721. RFC 6979. Informational.
J. Gilmore; S. Weiler; T. Kivinen (June 2014). P. Wouters; H. Tschofenig (eds.). Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Internet Engineering Task Force. doi:10.17487/RFC7250. ISSN 2070-1721. RFC 7250. Proposed Standard.

rhul.ac.uk (Global: low place; English: low place)

isg.rhul.ac.uk

"On the Security of RC4 in TLS". Royal Holloway Department of Information Security. Archived from the original on March 15, 2013. Retrieved April 29, 2014.

sophos.com (Global: low place; English: low place)

nakedsecurity.sophos.com

"BoringSSL wants to kill the excitement that led to Heartbleed". Sophos. June 24, 2014. Archived from the original on February 14, 2018. Retrieved October 24, 2016.

spdx.org (Global: low place; English: low place)

"OpenSSL License | Software Package Data Exchange (SPDX)". spdx.org.

swtch.com (Global: low place; English: low place)

research.swtch.com

"research!rsc: Lessons from the Debian/OpenSSL Fiasco". research.swtch.com. Retrieved August 12, 2015.

tenable.com (Global: low place; English: low place)

"RHEL 9 : openssl (RHSA-2022:6224)". www.tenable.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.

twitter.com (Global: 43^rd place; English: 43^rd place)

"quictls announce on twitter".

ubuntu.com (Global: 3,845^th place; English: 4,505^th place)

discourse.ubuntu.com

"OpenSSL 3.0 transition plans". Ubuntu Community Hub. April 6, 2022. Archived from the original on December 25, 2024. Retrieved February 25, 2023.

ugent.be (Global: 3,681^st place; English: 3,778^th place)

users.ugent.be

"WGET 1.10.2 for Windows (win32)". users.ugent.be. Archived from the original on January 2, 2008.

undeadly.org (Global: low place; English: low place)

"OpenBSD has started a massive strip-down and cleanup of OpenSSL". OpenBSD journal. April 15, 2014. Archived from the original on July 1, 2014. Retrieved April 21, 2014.

web.archive.org (Global: 1^st place; English: 1^st place)

"/source/license.html". www.openssl.org. Archived from the original on January 18, 2019. Retrieved March 3, 2021.
Laurie, Ben (January 6, 1999). "Announce: OpenSSL (Take 2)". ssl-users (Mailing list). Archived from the original on March 23, 2019. Retrieved October 29, 2018.
"New Committers". OpenSSL Software Foundation. May 20, 2019. Archived from the original on October 14, 2024. Retrieved October 11, 2024.
"OpenSSL Management Committee". OpenSSL Software Foundation. Archived from the original on July 22, 2018. Retrieved November 3, 2019.
"OpenSSL Committers". OpenSSL Software Foundation. Archived from the original on July 22, 2018. Retrieved November 3, 2019.
Marquess, Steve (January 19, 2017). "Akamai sponsors TLS 1.3". openssl-announce (Mailing list). Archived from the original on February 1, 2017. Retrieved November 9, 2018.
"OpenSSL – Changelog". OpenSSL Software Foundation. Archived from the original on September 13, 2016. Retrieved September 26, 2016.
"OpenSSL Library – Release Strategy". OpenSSL Software Foundation. Archived from the original on December 9, 2024. Retrieved August 1, 2024.
"OpenSSL 3.2.0 Final Release". OpenSSL Blog. November 23, 2023. Archived from the original on December 7, 2024. Retrieved October 11, 2024.
"OpenSSL 3.4 Final Release". OpenSSL Blog. October 22, 2024. Archived from the original on December 8, 2024. Retrieved November 22, 2024.
"OpenSSL 3.5 Final Release". OpenSSL Blog. April 8, 2025. Archived from the original on April 25, 2025. Retrieved April 28, 2025.
"OpenSSL source code, directory crypto/whrlpool". GitHub. Archived from the original on February 17, 2019. Retrieved August 29, 2017.
"Protecting data for the long term with forward secrecy". Archived from the original on March 4, 2016. Retrieved November 5, 2012.
"NIST recertifies open source encryption module". gcn.com. Archived from the original on October 10, 2007.
"OpenSSL User Guide for the OpenSSL FIPS Object Module v2.0" (PDF). openssl.org. March 14, 2017. Archived (PDF) from the original on June 9, 2020. Retrieved November 12, 2019.
"Cryptographic Module Validation Program Certificate #2398". Computer Security Resource Center. October 11, 2016. Archived from the original on October 26, 2020. Retrieved October 29, 2020.
Schneider, Troy K. (July 20, 2016). "Getting government approval of a more secure OpenSSL". GCN: Technology, Tools, and Tactics for Public Sector IT. Archived from the original on May 9, 2021. Retrieved October 29, 2020.
"OpenSSL 3.0 Alpha7 Release". OpenSSL Blog. October 20, 2020. Archived from the original on October 14, 2024. Retrieved October 11, 2024.
"Cryptographic Module Validation Program: OpenSSL". Computer Security Resource Center. October 11, 2016. Archived from the original on April 14, 2021. Retrieved September 24, 2021.
"OpenSSL: Source, License". openssl.org. Archived from the original on January 18, 2019. Retrieved February 5, 2015.
"Licenses – Free Software Foundation". fsf.org. Archived from the original on January 24, 2008. Retrieved January 4, 2008.
"WGET 1.10.2 for Windows (win32)". users.ugent.be. Archived from the original on January 2, 2008.
"Releases of source and binaries". climm.org. Archived from the original on February 12, 2011. Retrieved November 30, 2010.
"Deluge LICENSE file". deluge-torrent.org. Archived from the original on December 3, 2013. Retrieved January 24, 2013.
"OpenSSL Re-licensing to Apache License v. 2.0 To Encourage Broader Use with Other FOSS Projects and Products". March 23, 2017. Archived from the original on July 18, 2017. Retrieved August 6, 2018.
Lee, Victoria; Radcliffe, Mark; Stevenson, Chris (5 February 2019). "Top 10 FOSS legal developments of 2018". Opensource.com, Red Hat. Archived from the original on 5 February 2019. Retrieved 28 September 2019. The OpenSSL project announced that it had completed its shift from the OpenSSL/SSLeay license to the Apache Software License version 2 (ASLv2).
"OpenSSL 3.0 License Change". September 22, 2021. Archived from the original on January 17, 2025. Retrieved September 24, 2021.
"OpenSSL Updates Fix Critical Security Vulnerabilities". August 9, 2014. Archived from the original on August 26, 2014. Retrieved August 25, 2014.
"OpenSSL ASN.1 asn1_d2i_read_bio() Heap Overflow Vulnerability". Cisco. Archived from the original on June 10, 2016. Retrieved May 9, 2016.
"ASN1 BIO vulnerability". OpenSSL. Archived from the original on March 2, 2015. Retrieved February 5, 2015.
"On the Security of RC4 in TLS". Royal Holloway Department of Information Security. Archived from the original on March 15, 2013. Retrieved April 29, 2014.
"Debian OpenSSL – Predictable PRNG Bruteforce SSH Exploit Python". Exploits Database. June 1, 2008. Archived from the original on February 6, 2025. Retrieved August 12, 2015.
"DSA-1571-1 openssl – predictable random number generator". Debian Project. May 13, 2008. Archived from the original on March 9, 2011. Retrieved August 5, 2012.
OpenSSL.org (April 7, 2014). "OpenSSL Security Advisory [07 Apr 2014]". Archived from the original on April 8, 2014. Retrieved April 9, 2014.
OpenSSL (April 7, 2014). "TLS heartbeat read overrun (CVE-2014-0160)". Archived from the original on April 8, 2014. Retrieved April 8, 2014.
Codenomicon Ltd (April 8, 2014). "Heartbleed Bug". Archived from the original on April 7, 2014. Retrieved April 8, 2014.
"Why Heartbleed is dangerous? Exploiting CVE-2014-0160". IPSec.pl. 2014. Archived from the original on April 8, 2014. Retrieved April 8, 2014.
Mutton, Paul (April 8, 2014). "Half a million widely trusted websites vulnerable to Heartbleed bug". Netcraft Ltd. Archived from the original on November 19, 2014. Retrieved April 8, 2014.
"OpenSSL continues to bleed out more flaws – more critical vulnerabilities found". Cyberoam Threat Research Labs. 2014. Archived from the original on June 19, 2014. Retrieved June 13, 2014.
"CVE-2014-0224". CVE. 2014. Archived from the original on August 1, 2014. Retrieved June 13, 2014.
"OpenSSL Security Advisory". OpenSSL. June 5, 2014. Archived from the original on April 30, 2024. Retrieved June 13, 2014.
"OpenSSL Patches Severe Denial-of-Service Vulnerability". Brandon Stosh. March 20, 2015. Archived from the original on April 2, 2015. Retrieved March 20, 2015.
Goodlin, Dan (January 28, 2016). "High-severity bug in OpenSSL allows attackers to decrypt HTTPS traffic". Ars Technica. Archived from the original on November 20, 2016. Retrieved June 14, 2017.
"Agglomerated SSL". GitHub. September 7, 2010. Archived from the original on December 9, 2024. Retrieved December 9, 2024.
"security/assl: assl-1.5.0p0v0 – hide awful SSL API in a sane interface". OpenBSD ports. May 22, 2014. Archived from the original on February 10, 2015. Retrieved February 10, 2015.
"OpenBSD has started a massive strip-down and cleanup of OpenSSL". OpenBSD journal. April 15, 2014. Archived from the original on July 1, 2014. Retrieved April 21, 2014.
"OpenBSD forks, prunes, fixes OpenSSL". ZDNet. April 21, 2014. Archived from the original on April 21, 2014. Retrieved April 21, 2014.
"BoringSSL". Git at Google. Archived from the original on February 17, 2018. Retrieved December 28, 2015.
"Google unveils independent 'fork' of OpenSSL called 'BoringSSL'". Ars Technica. June 21, 2014. Archived from the original on June 23, 2014. Retrieved June 14, 2017.
"BoringSSL". Adam Langley's Weblog. June 20, 2014. Archived from the original on June 1, 2018. Retrieved September 22, 2015.
"BoringSSL wants to kill the excitement that led to Heartbleed". Sophos. June 24, 2014. Archived from the original on February 14, 2018. Retrieved October 24, 2016.
"OpenSSL 3 breaks webpack build · Issue #22305 · brave/brave-browser". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"openssl version 3.0 in arch? / Newbie Corner / Arch Linux Forums". bbs.archlinux.org. Archived from the original on May 16, 2024. Retrieved February 25, 2023.
"OpenSSL 3.0 transition plans". Ubuntu Community Hub. April 6, 2022. Archived from the original on December 25, 2024. Retrieved February 25, 2023.
"OpenSSL 3.0 Compatibility · Issue #597 · nginx/unit". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Our future with OpenSSL". Discussions on Python.org. November 28, 2022. Archived from the original on February 25, 2023. Retrieved February 25, 2023.
"Compile against OpenSSL 3.X". groups.google.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"ESET Management Agent (RHEL 9.x, OpenSSL 3.0.x)". ESET Security Forum. June 6, 2022. Archived from the original on December 9, 2024. Retrieved February 25, 2023.
"Issue 46313: SSLObject does not raise SSLEOFError on OpenSSL 3 - Python tracker". bugs.python.org. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"RHEL 9 : openssl (RHSA-2022:6224)". www.tenable.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Massive performance degradation in OpenSsl 3.0 if used in a heavy multi threaded server application · Issue #17064 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Performance issue with Openssl 3.0 in multi threaded application when using d2i_x509 · Issue #17950 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Severe efficiency degradation of credential loading in comparison to 1.1.1 · Issue #18814 · openssl/openssl". GitHub. Archived from the original on December 7, 2024. Retrieved February 25, 2023.
"High cpu usage for outbound ssl requests after upgrading from v16.15.0 to v18.1.0 · Issue #43128 · nodejs/node". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Massive performance degradation in OpenSsl 3.0 FIPS provider · Issue #18472 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"Performance measurements · Issue #16791 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"PEM/DER decoding of PKCS8 RSA private keys are 80 times slower in 3.0 · Issue #15199 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"3.0 Performance problems · Issue #17627 · openssl/openssl". GitHub. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
Thomson, Martin; Turner, Sean (January 14, 2017). "Using Transport Layer Security (TLS) to Secure QUIC". Archived from the original on December 8, 2024. Retrieved November 27, 2023 – via IETF.
"Support QUIC TLS API (#826) · Issues · gnutls / GnuTLS · GitLab". GitLab. September 4, 2019. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"WIP: master QUIC support by tmshort · Pull Request #8797 · openssl/openssl". GitHub. Archived from the original on January 21, 2025. Retrieved February 25, 2023.
"OMC Release Requirements". www.mail-archive.com. Archived from the original on January 21, 2025. Retrieved February 25, 2023.
"The QUIC API OpenSSL will not provide | daniel.haxx.se". October 25, 2021. Archived from the original on January 21, 2025. Retrieved February 25, 2023.
Tarreau, Willy (October 27, 2021). "[Pkg-openssl-devel] Any intent to maintain quictls ?". Archived from the original on December 7, 2024. Retrieved February 25, 2023.
"Bug#1011391: openssl: please support quictls patchset". groups.google.com. Archived from the original on December 8, 2024. Retrieved February 25, 2023.
"HTTP/3 support · Issue #680 · haproxy/haproxy". GitHub. Archived from the original on December 7, 2024. Retrieved February 25, 2023.

worldcat.org (Global: 4^th place; English: 4^th place)

search.worldcat.org

R. Seggelmann; M. Tuexen; M. Williams (February 2012). Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension. Internet Engineering Task Force. doi:10.17487/RFC6520. ISSN 2070-1721. RFC 6520. Proposed Standard. Updated by RFC 8447.
E. Rescorla (January 2010). Keying Material Exporters for Transport Layer Security (TLS). Internet Engineering Task Force. doi:10.17487/RFC5705. ISSN 2070-1721. RFC 5705. Proposed Standard. Updated by RFC 8446 and 8447.
D. McGrew; E. Rescorla (May 2010). Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP). Internet Engineering Task Force. doi:10.17487/RFC5764. ISSN 2070-1721. RFC 5764. Proposed Standard. Updated by RFC 7983 and 9443.
J-P. Aumasson (October 2015). M-J. Saarinen (ed.). The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Independent Submission. doi:10.17487/RFC7693. ISSN 2070-1721. RFC 7693. Informational.
Y. Nir; A. Langley (June 2018). ChaCha20 and Poly1305 for IETF Protocols. Internet Research Task Force. doi:10.17487/RFC8439. ISSN 2070-1721. RFC 8439. Informational. Obsoletes RFC 7539.
A. Langley; M. Hamburg; S. Turner (January 2016). Elliptic Curves for Security. Internet Engineering Task Force. doi:10.17487/RFC7748. ISSN 2070-1721. RFC 7748. Informational.
B. Kaliski; A. Rusch; J. Johnsson; A. Rusch (November 2016). K. Moriarty (ed.). PKCS #1: RSA Cryptography Specifications Version 2.2. Internet Engineering Task Force. doi:10.17487/RFC8017. ISSN 2070-1721. RFC 8017. Informational. Obsoletes RFC 3447.
A. Ghedini; V. Vasiliev (December 2020). TLS Certificate Compression. Internet Engineering Task Force. doi:10.17487/RFC8879. ISSN 2070-1721. RFC 8879. Proposed Standard.
T. Pornin (August 2013). Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA). Independent Submission. doi:10.17487/RFC6979. ISSN 2070-1721. RFC 6979. Informational.
J. Gilmore; S. Weiler; T. Kivinen (June 2014). P. Wouters; H. Tschofenig (eds.). Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Internet Engineering Task Force. doi:10.17487/RFC7250. ISSN 2070-1721. RFC 7250. Proposed Standard.

zdnet.com (Global: 1,235^th place; English: 855^th place)

"OpenBSD forks, prunes, fixes OpenSSL". ZDNet. April 21, 2014. Archived from the original on April 21, 2014. Retrieved April 21, 2014.

OpenSSL (English Wikipedia)

alioth-lists.debian.net (Global: low place; English: low place)

archlinux.org (Global: low place; English: low place)

bbs.archlinux.org

arstechnica.com (Global: 473rd place; English: 338th place)

chromium.org (Global: 9,404th place; English: 9,224th place)

bugs.chromium.org

cisco.com (Global: 5,047th place; English: 3,553rd place)

tools.cisco.com

climm.org (Global: low place; English: low place)

comodo.com (Global: low place; English: low place)

blogs.comodo.com

coreinfrastructure.org (Global: low place; English: low place)

cyberoam.com (Global: low place; English: low place)

dbta.com (Global: low place; English: low place)

debian.org (Global: 3,258th place; English: 2,984th place)

wiki.debian.org

debian.org

deluge-torrent.org (Global: low place; English: low place)

git.deluge-torrent.org

doi.org (Global: 2nd place; English: 2nd place)

eset.com (Global: low place; English: low place)

forum.eset.com

eweek.com (Global: 8,041st place; English: 5,594th place)

exploit-db.com (Global: low place; English: low place)

fedscoop.com (Global: low place; English: low place)

freedomhacker.net (Global: low place; English: low place)

fsf.org (Global: 8,097th place; English: low place)

gcn.com (Global: low place; English: low place)

github.com (Global: 380th place; English: 337th place)

gitlab.com (Global: low place; English: low place)

googleonlinesecurity.blogspot.com.au (Global: low place; English: low place)

googlesource.com (Global: low place; English: low place)

boringssl.googlesource.com

groups.google.com (Global: 2,153rd place; English: 1,445th place)

haxx.se (Global: low place; English: low place)

daniel.haxx.se

heartbleed.com (Global: low place; English: low place)

ietf.org (Global: 731st place; English: 625th place)

datatracker.ietf.org

imperialviolet.org (Global: low place; English: low place)

infoworld.com (Global: 5,156th place; English: 3,760th place)

ipsec.pl (Global: low place; English: low place)

mail-archive.com (Global: low place; English: low place)

marc.info (Global: low place; English: low place)

medium.com (Global: 651st place; English: 479th place)

mitre.org (Global: low place; English: low place)

cve.mitre.org

netcraft.com (Global: low place; English: low place)

news.netcraft.com

nist.gov (Global: 708th place; English: 742nd place)

csrc.nist.gov

opensource.com (Global: low place; English: low place)

openssl-corporation.org (Global: low place; English: low place)

openssl-library.org (Global: low place; English: low place)

openssl.org (Global: low place; English: low place)

openssl.org

mta.openssl.org

cvs.openssl.org

wiki.openssl.org

ports.su (Global: low place; English: low place)

python.org (Global: 4,399th place; English: 3,941st place)

discuss.python.org

bugs.python.org

redhat.com (Global: 6,005th place; English: 4,993rd place)

rfc-editor.org (Global: 747th place; English: 325th place)

rhul.ac.uk (Global: low place; English: low place)

isg.rhul.ac.uk

sophos.com (Global: low place; English: low place)

nakedsecurity.sophos.com

spdx.org (Global: low place; English: low place)

swtch.com (Global: low place; English: low place)

research.swtch.com

tenable.com (Global: low place; English: low place)

twitter.com (Global: 43rd place; English: 43rd place)

ubuntu.com (Global: 3,845th place; English: 4,505th place)

discourse.ubuntu.com

ugent.be (Global: 3,681st place; English: 3,778th place)

users.ugent.be

undeadly.org (Global: low place; English: low place)

arstechnica.com (Global: 473^rd place; English: 338^th place)

chromium.org (Global: 9,404^th place; English: 9,224^th place)

cisco.com (Global: 5,047^th place; English: 3,553^rd place)

debian.org (Global: 3,258^th place; English: 2,984^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

eweek.com (Global: 8,041^st place; English: 5,594^th place)

fsf.org (Global: 8,097^th place; English: low place)

github.com (Global: 380^th place; English: 337^th place)

groups.google.com (Global: 2,153^rd place; English: 1,445^th place)

ietf.org (Global: 731^st place; English: 625^th place)

infoworld.com (Global: 5,156^th place; English: 3,760^th place)

medium.com (Global: 651^st place; English: 479^th place)

nist.gov (Global: 708^th place; English: 742^nd place)

python.org (Global: 4,399^th place; English: 3,941^st place)

redhat.com (Global: 6,005^th place; English: 4,993^rd place)

rfc-editor.org (Global: 747^th place; English: 325^th place)

twitter.com (Global: 43^rd place; English: 43^rd place)

ubuntu.com (Global: 3,845^th place; English: 4,505^th place)

ugent.be (Global: 3,681^st place; English: 3,778^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

worldcat.org (Global: 4^th place; English: 4^th place)

zdnet.com (Global: 1,235^th place; English: 855^th place)