Blog | G5 Cyber Security

BoringSSL wants to kill the excitement that led to Heartbleed

BoringSSL is a version of OpenSSL that has diverged so much from its parent that its now a distinct entity in its own right. Google has for years been routinely patching OpenSSL before using it. The effort involved in keeping all these patches (and there are more than 70 at the moment) straight across multiple code bases is getting to be too much. The project will continue to exchange code with OpenSSL where possible but also be free to share code with LibreSSL, another attempt to bring dullness and sobriety to the beleaguered crypto code.”]

Source: https://nakedsecurity.sophos.com/2014/06/24/boringssl-wants-kill-the-excitement-that-led-to-heartbleed/

Exit mobile version