[wolf550e]

"SSL/TLS state machine, version negotiation and record layer rewritten" from the release notes sounds scary.

The changelog says:

  *) State machine rewrite. The state machine code has been significantly
     refactored in order to remove much duplication of code and solve issues
     with the old code (see ssl/statem/README for further details). This change
     does have some associated API changes. Notably the SSL_state() function
     has been removed and replaced by SSL_get_state which now returns an
     "OSSL_HANDSHAKE_STATE" instead of an int. SSL_set_state() has been removed
     altogether. The previous handshake states defined in ssl.h and ssl3.h have
     also been removed.
     [Matt Caswell]

[schoen]

I would like to see these folks analyze the new code, considering their success in finding problems in this area before.

https://www.smacktls.com/

(I think there is also another group in the UK that works on this problem and also got important results.)