nettle-3.9.1

[Douglas R. Reno]

New point version

[Tim Tassonis]

• ocb.c (ocb_crypt_n): Fix broken loop logic.

• testsuite/ocb-test.c (test_main): Add test vector from libgcrypt, with larger message, to exercise above loop.

• x86_64/ghash-update.asm: Use separate unaligned load instructions (movups) to load the tabulated values, since they are only 8-byte aligned and pand memory operands require 16-byte alignment.

• eccdata.c (output_bignum_redc): Add missing mpz_clear, reported by Noah Watkins. (output_digits): Delete a gratuitous mpz_init.

[Tim Tassonis]

Fixed in commit 1f39333658

[Bruce Dubbs]

Milestone renamed