diff --git a/security/boringssl/Makefile b/security/boringssl/Makefile
index df0e896a6f0b..26aba275e366 100644
--- a/security/boringssl/Makefile
+++ b/security/boringssl/Makefile
@@ -1,48 +1,47 @@
 PORTNAME=	boringssl
-PORTVERSION=	0.20260327.0
-PORTREVISION=	1
+PORTVERSION=	0.20260413.0
 CATEGORIES=	security
 EXTRACT_ONLY=	${GH_ACCOUNT}-${PORTNAME}-${PORTVERSION}_GH0.tar.gz
 
 MAINTAINER=	osa@FreeBSD.org
 COMMENT=	Fork of OpenSSL
 WWW=		https://boringssl.googlesource.com/boringssl/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cmake:insource cpe go:1.24+,no_targets localbase perl5
 
 CONFLICTS_INSTALL=	libressl libressl-devel openssl openssl111 \
 			openssl3[23456] openssl-quictls openssl33-quictls
 
 CPE_VENDOR=	google
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	google
 CMAKE_ARGS+=	-DBUILD_SHARED_LIBS=1
 
 CFLAGS_i386=	-msse2
 USE_LDCONFIG=	yes
 LDFLAGS+=	-Wl,-rpath,${LOCALBASE}/lib
 TEST_TARGET=	run_tests
 MAKE_ENV+=	GOFLAGS=-mod=readonly \
 		GOPROXY=file://${DISTDIR}
 
 .include <bsd.port.pre.mk>
 
 .if ${.TARGETS} == "makesum" || ${.TARGETS} == "test"
 MASTER_SITES+=	https://proxy.golang.org/:gomods
 DISTFILES+=	filippo.io/edwards25519/@v/v1.2.0.zip:gomods \
 		filippo.io/edwards25519/@v/v1.2.0.mod:gomods \
 		golang.org/x/crypto/@v/v0.43.0.zip:gomods \
 		golang.org/x/crypto/@v/v0.43.0.mod:gomods \
 		golang.org/x/sys/@v/v0.37.0.zip:gomods \
 		golang.org/x/sys/@v/v0.37.0.mod:gomods
 .endif
 
 post-install:
 	${LN} -sf libcrypto.so.1 ${STAGEDIR}${PREFIX}/lib/libcrypto.so.1.0.0
 	${LN} -sf libssl.so.1 ${STAGEDIR}${PREFIX}/lib/libssl.so.1.0.0
 
 .include <bsd.port.post.mk>
diff --git a/security/boringssl/distinfo b/security/boringssl/distinfo
index 11e90d42780c..a53c50c4f1f8 100644
--- a/security/boringssl/distinfo
+++ b/security/boringssl/distinfo
@@ -1,15 +1,15 @@
-TIMESTAMP = 1775575257
+TIMESTAMP = 1776261535
 SHA256 (filippo.io/edwards25519/@v/v1.2.0.zip) = 98f2d3ca9b88daa031b0fb2fb521b7ea386af1fed61b6f445a20bef7fa381c17
 SIZE (filippo.io/edwards25519/@v/v1.2.0.zip) = 56057
 SHA256 (filippo.io/edwards25519/@v/v1.2.0.mod) = 7492c767dc361b86e96933ca1790d492c2f7c368c3ec0e00e1050eddad7baa7d
 SIZE (filippo.io/edwards25519/@v/v1.2.0.mod) = 42
 SHA256 (golang.org/x/crypto/@v/v0.43.0.zip) = 0b11e4f2ac759849fc2567213e22e7dcb2e1bfe9755aca46c95d8d253f3c610b
 SIZE (golang.org/x/crypto/@v/v0.43.0.zip) = 2233740
 SHA256 (golang.org/x/crypto/@v/v0.43.0.mod) = d83331446e98865733a1bd882774bd2f23d69dd3500adb5c7f79832b51cdd95b
 SIZE (golang.org/x/crypto/@v/v0.43.0.mod) = 192
 SHA256 (golang.org/x/sys/@v/v0.37.0.zip) = 6c87bb94ec328b6d6234ad02cf2813225fe3bd5f8929fe85775ca06e01cfcc78
 SIZE (golang.org/x/sys/@v/v0.37.0.zip) = 1998239
 SHA256 (golang.org/x/sys/@v/v0.37.0.mod) = f411814d83a96e86781b1dee41c125b9504da5422dba37cc1d63b016ae39cfe2
 SIZE (golang.org/x/sys/@v/v0.37.0.mod) = 35
-SHA256 (google-boringssl-0.20260327.0_GH0.tar.gz) = 6af7037a8891d0e3d097dd61de6d195f6c2b532ed69d138a16da47c06a6cd022
-SIZE (google-boringssl-0.20260327.0_GH0.tar.gz) = 61947068
+SHA256 (google-boringssl-0.20260413.0_GH0.tar.gz) = 3560f7dd3f08e16b9f84d877a5be21ec62071564783009571af5fcc6fad734d2
+SIZE (google-boringssl-0.20260413.0_GH0.tar.gz) = 70098624
diff --git a/security/boringssl/files/patch-CMakeLists.txt b/security/boringssl/files/patch-CMakeLists.txt
index e307d4567f5a..7903e41332fc 100644
--- a/security/boringssl/files/patch-CMakeLists.txt
+++ b/security/boringssl/files/patch-CMakeLists.txt
@@ -1,12 +1,12 @@
---- CMakeLists.txt.orig	2026-03-27 16:14:30 UTC
+--- CMakeLists.txt.orig	2026-04-14 06:05:39 UTC
 +++ CMakeLists.txt
-@@ -768,6 +768,9 @@ target_link_libraries(bssl ssl crypto)
- add_executable(bssl ${BSSL_SOURCES})
- target_link_libraries(bssl ssl crypto)
+@@ -773,6 +773,9 @@ endif()
+   target_link_libraries(generate_mldsa_certs crypto)
+ endif()
  
 +SET_TARGET_PROPERTIES(ssl PROPERTIES SOVERSION 1)
 +SET_TARGET_PROPERTIES(crypto PROPERTIES SOVERSION 1)
 +
  if(FUZZ)
    # TODO(crbug.com/42290412): Drive this build with build.json and flatten.
    add_subdirectory(fuzz)
diff --git a/security/boringssl/pkg-plist b/security/boringssl/pkg-plist
index 1dae21c81f76..319652fef3fc 100644
--- a/security/boringssl/pkg-plist
+++ b/security/boringssl/pkg-plist
@@ -1,112 +1,113 @@
 bin/bssl
 include/openssl/aead.h
 include/openssl/aes.h
 include/openssl/arm_arch.h
 include/openssl/asm_base.h
 include/openssl/asn1.h
 include/openssl/asn1_mac.h
 include/openssl/asn1t.h
 include/openssl/base.h
 include/openssl/base64.h
 include/openssl/bio.h
 include/openssl/blake2.h
 include/openssl/blowfish.h
 include/openssl/bn.h
 include/openssl/buf.h
 include/openssl/buffer.h
 include/openssl/bytestring.h
 include/openssl/cast.h
 include/openssl/chacha.h
 include/openssl/cipher.h
 include/openssl/cmac.h
 include/openssl/cms.h
 include/openssl/conf.h
 include/openssl/cpu.h
 include/openssl/crypto.h
 include/openssl/ctrdrbg.h
 include/openssl/curve25519.h
 include/openssl/des.h
 include/openssl/dh.h
 include/openssl/digest.h
 include/openssl/dsa.h
 include/openssl/dtls1.h
 include/openssl/e_os2.h
 include/openssl/ec.h
 include/openssl/ec_key.h
 include/openssl/ecdh.h
 include/openssl/ecdsa.h
 include/openssl/engine.h
 include/openssl/err.h
 include/openssl/evp.h
 include/openssl/evp_errors.h
 include/openssl/ex_data.h
 include/openssl/hkdf.h
 include/openssl/hmac.h
 include/openssl/hpke.h
 include/openssl/hrss.h
 include/openssl/is_boringssl.h
 include/openssl/kdf.h
 include/openssl/lhash.h
 include/openssl/md4.h
 include/openssl/md5.h
 include/openssl/mem.h
 include/openssl/mldsa.h
 include/openssl/mlkem.h
 include/openssl/nid.h
 include/openssl/obj.h
 include/openssl/obj_mac.h
 include/openssl/objects.h
 include/openssl/opensslconf.h
 include/openssl/opensslv.h
 include/openssl/ossl_typ.h
+include/openssl/params.h
 include/openssl/pem.h
 include/openssl/pkcs12.h
 include/openssl/pkcs7.h
 include/openssl/pkcs8.h
 include/openssl/pki/certificate.h
 include/openssl/pki/ocsp.h
 include/openssl/pki/signature_verify_cache.h
 include/openssl/pki/verify.h
 include/openssl/pki/verify_error.h
 include/openssl/poly1305.h
 include/openssl/pool.h
 include/openssl/posix_time.h
 include/openssl/prefix_symbols.h
 include/openssl/prefix_symbols_internal_S.h
 include/openssl/prefix_symbols_internal_c.h
 include/openssl/rand.h
 include/openssl/rc4.h
 include/openssl/ripemd.h
 include/openssl/rsa.h
 include/openssl/safestack.h
 include/openssl/service_indicator.h
 include/openssl/sha.h
 include/openssl/sha2.h
 include/openssl/siphash.h
 include/openssl/slhdsa.h
 include/openssl/span.h
 include/openssl/srtp.h
 include/openssl/ssl.h
 include/openssl/ssl3.h
 include/openssl/stack.h
 include/openssl/target.h
 include/openssl/thread.h
 include/openssl/time.h
 include/openssl/tls1.h
 include/openssl/tls_prf.h
 include/openssl/trust_token.h
 include/openssl/type_check.h
 include/openssl/x509.h
 include/openssl/x509_vfy.h
 include/openssl/x509v3.h
 include/openssl/x509v3_errors.h
 include/openssl/xwing.h
 lib/cmake/OpenSSL/OpenSSLConfig.cmake
 lib/cmake/OpenSSL/OpenSSLTargets-%%CMAKE_BUILD_TYPE%%.cmake
 lib/cmake/OpenSSL/OpenSSLTargets.cmake
 lib/libcrypto.so
 lib/libcrypto.so.1
 lib/libcrypto.so.1.0.0
 lib/libssl.so
 lib/libssl.so.1
 lib/libssl.so.1.0.0