#13472 closed enhancement (fixed)
nettle-3.6
| Reported by: | Douglas R. Reno | Owned by: | Douglas R. Reno |
|---|---|---|---|
| Priority: | normal | Milestone: | 10.0 |
| Component: | BOOK | Version: | SVN |
| Severity: | normal | Keywords: | |
| Cc: |
Description ¶
New minor version
Change History (10)
comment:1 by , 5 years ago
comment:2 by , 5 years ago
Here's the release announcement in case we encounter any problems with the API and ABI changes
I'm happy to announce a new release of GNU Nettle, a low-level cryptographics library. This version includes several new features, and a couple of bug fixes, see NEWS entries below. The Nettle home page can be found at https://www.lysator.liu.se/~nisse/nettle/, and the manual at https://www.lysator.liu.se/~nisse/nettle/nettle.html. The release can be downloaded from https://ftp.gnu.org/gnu/nettle/nettle-3.6.tar.gz ftp://ftp.gnu.org/gnu/nettle/nettle-3.6.tar.gz https://www.lysator.liu.se/~nisse/archive/nettle-3.6.tar.gz Happy hacking, /Niels Möller NEWS for the Nettle 3.6 release This release adds a couple of new features, most notable being support for ED448 signatures. It is not binary compatible with earlier releases. The shared library names are libnettle.so.8.0 and libhogweed.so.6.0, with sonames nibnettle.so.8 and libhogweed.so.6. The changed sonames are mainly to avoid upgrade problems with recent GnuTLS versions, that depend on Nettle internals outside of the advertised ABI. But also because of the removal of internal poly1305 functions which were undocumented but declared in an installed header file, see Interface changes below. New features: * Support for Curve448 and ED448 signatures. Contributed by Daiki Ueno. * Support for SHAKE256 (SHA3 variant with arbitrary output size). Contributed by Daiki Ueno. * Support for SIV-CMAC (Synthetic Initialization Vector) mode, contributed by Nikos Mavrogiannopoulos. * Support for CMAC64, contributed by Dmitry Baryshkov. * Support for the "CryptoPro" variant of the GOST hash function, as gosthash94cp. Contributed by Dmitry Baryshkov. * Support for GOST DSA signatures, including GOST curves gc256b and gc512a. Contributed by Dmitry Baryshkov. * Support for Intel CET in x86 and x86_64 assembly files, if enabled via CFLAGS (gcc --fcf-protection=full). Contributed by H.J. Lu and Simo Sorce. * A few new functions to improve support for the Chacha variant with 96-bit nonce and 32-bit block counter (the existing functions use nonce and counter of 64-bit each), and functions to set the counter. Contributed by Daiki Ueno. * New interface, struct nettle_mac, for MAC (message authentication code) algorithms. This abstraction is only for MACs that don't require a per-message nonce. For HMAC, the key size is fixed, and equal the digest size of the underlying hash function. Bug fixes: * Fix bug in cfb8_decrypt. Previously, the IV was not updated correctly in the case of input data shorter than the block size. Reported by Stephan Mueller, fixed by Daiki Ueno. * Fix configure check for __builtin_bswap64, the incorrect check would result in link errors on platforms missing this function. Patch contributed by George Koehler. * All use of old-fashioned suffix rules in the Makefiles have been replaced with %-pattern rules. Nettle's use of suffix rules in earlier versions depended on undocumented GNU make behavior, which is being deprecated in GNU make 4.3. Building with other make programs than GNU make is untested and unsupported. (Building with BSD make or Solaris make used to work years ago, but has not been tested recently). Interface changes: * Declarations of internal poly1305.h functions have been removed from the header file poly1305.h, to make it clear that they are not part of the advertised API or ABI. Miscellaneous: * Building the public key support of nettle now requires GMP version 6.1.0 or later (unless --enable-mini-gmp is used). * A fair amount of changes to ECC internals, with a few deleted and a few new fields in the internal struct ecc_curve. Files and functions have been renamed to more consistently match the curve name, e.g., ecc-256.c has been renamed to ecc-secp256r1.c. * Documentation for chacha-poly1305 updated. It is no longer experimental. The implementation was updated to follow RFC 8439 in Nettle-3.1, but that was not documented or announced at the time.
follow-up: 4 comment:3 by , 5 years ago
| Milestone: | 9.2 → hold |
|---|---|
| Summary: | nettle-3.6 → nettle-3.6 (hold until new version of GnuTLS) |
Let's hold on this until we have a new version of GnuTLS. See the release announcement above.
comment:4 by , 5 years ago
Replying to renodr:
Let's hold on this until we have a new version of GnuTLS. See the release announcement above.
I think it does not mean we need to hold. It means we have to rebuild GnuTLS after upgrading nettle. (Not sure, I'll try on my machine.)
comment:5 by , 5 years ago
| Milestone: | hold → 9.2 |
|---|
Current version of GnuTLS builds with new nettle fine. And, gst-plugins-bad and epiphany also need to be rebuilt to link to new lib{nettle,hogweed}.so (SONAME changed).
comment:6 by , 5 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:7 by , 5 years ago
| Summary: | nettle-3.6 (hold until new version of GnuTLS) → nettle-3.6 |
|---|
Note:
See TracTickets
for help on using tickets.
2020-04-25 Niels Möller <nisse@…>
2020-04-23 Niels Möller <nisse@…>
2020-04-22 Niels Möller <nisse@…>
2020-04-21 Niels Möller <nisse@…>
2020-04-19 Niels Möller <nisse@…>
2020-04-17 Niels Möller <nisse@…>
2020-04-15 Niels Möller <nisse@…>
2020-04-12 Niels Möller <nisse@…>
2020-04-06 Niels Möller <nisse@…>
2020-04-01 Niels Möller <nisse@…>
2020-03-31 Niels Möller <nisse@…>
2020-03-26 Niels Möller <nisse@…>
2020-03-14 Niels Möller <nisse@…>
2020-03-09 Niels Möller <nisse@…>
2020-03-08 Niels Möller <nisse@…>
2020-02-15 Niels Möller <nisse@…>
2020-02-09 Niels Möller <nisse@…>
2020-02-06 Niels Möller <nisse@…>
2020-02-05 Niels Möller <nisse@…>
2020-01-26 Niels Möller <nisse@…>