summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorwiz <wiz@pkgsrc.org>2015-11-21 09:21:40 +0000
committerwiz <wiz@pkgsrc.org>2015-11-21 09:21:40 +0000
commitb30ddcd5ee043c65711181aa8cfc08bee16ba910 (patch)
tree7726d7119e859d1b8f0cc6c56f779d7f5dafcb39 /security
parent2c2dd13a1d52a43bfe399584858ac3b4ca915209 (diff)
downloadpkgsrc-b30ddcd5ee043c65711181aa8cfc08bee16ba910.tar.gz
Update libsodium to 1.0.6.
Provided by csosstudy in PR 50455. Version 1.0.6 Optimized implementations of Blake2 have been added for modern Intel platforms. crypto_generichash() is now faster than MD5 and SHA1 implementations while being far more secure. Functions for which the return value should be checked have been tagged with __attribute__ ((warn_unused_result)). This will intentionally break code compiled with -Werror that didn't bother checking critical return values. The crypto_sign_edwards25519sha512batch_*() functions have been tagged as deprecated. Undocumented symbols that were exported, but were only useful for internal purposes have been removed or made private: sodium_runtime_get_cpu_features(), the implementation-specific crypto_onetimeauth_poly1305_donna() symbols, crypto_onetimeauth_poly1305_set_implementation(), crypto_onetimeauth_poly1305_implementation_name() and crypto_onetimeauth_pick_best_implementation(). sodium_compare() now works as documented, and compares numbers in little-endian format instead of behaving like memcmp(). The previous changes should not break actual applications, but to be safe, the library version major was incremented. sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have been added. The library can now be compiled with the CompCert compiler. Version 1.0.5 This release only fixes compilation issues on some platforms. If 1.0.4 compiled and installed fine on your system, upgrading to this version is not required. There are no functional changes. Compilation issues on some platforms were fixed: missing alignment directives were added (required at least on RHEL-6/i386), a workaround for a VRP bug on gcc/armv7 was added, and the library can now be compiled with the SunPro compiler. Javascript target: io.js is not supported any more. Use nodejs. Version 1.0.4 Support for AES256-GCM has been added. This requires a CPU with the aesni and pclmul extensions, and is accessible via the crypto_aead_aes256gcm_*() functions. The Javascript target doesn't use eval() any more, so that the library can be used in Chrome packaged applications. QNX and CloudABI are now supported. Support for NaCl has finally been added. ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has been implemented as crypto_stream_chacha20_ietf(), crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic(). An IETF-compatible version of ChaCha20Poly1305 is available as crypto_aead_chacha20poly1305_ietf_npubbytes(), crypto_aead_chacha20poly1305_ietf_encrypt() and crypto_aead_chacha20poly1305_ietf_decrypt(). The sodium_increment() helper function has been added, to increment an arbitrary large number (such as a nonce). The sodium_compare() helper function has been added, to compare arbitrary large numbers (such as nonces, in order to prevent replay attacks). Version 1.0.3 In addition to sodium_bin2hex(), sodium_hex2bin() is now a constant-time function. crypto_stream_xsalsa20_ic() has been added. crypto_generichash_statebytes(), crypto_auth_*_statebytes() and crypto_hash_*_statebytes() have been added in order to retrieve the size of structures keeping states from foreign languages. The JavaScript target doesn't require /dev/urandom or an external randombytes() implementation any more. Other minor Emscripten-related improvements have been made in order to support libsodium.js Custom randombytes implementations do not need to provide their own implementation of randombytes_uniform() any more. randombytes_stir() and randombytes_close() can also be NULL pointers if they are not required. On Linux, getrandom(2) is being used instead of directly accessing /dev/urandom, if the kernel supports this system call. crypto_box_seal() and crypto_box_seal_open() have been added. A solutions for Visual Studio 2015 was added.
Diffstat (limited to 'security')
-rw-r--r--security/libsodium/Makefile10
-rw-r--r--security/libsodium/PLIST3
-rw-r--r--security/libsodium/distinfo10
3 files changed, 12 insertions, 11 deletions
diff --git a/security/libsodium/Makefile b/security/libsodium/Makefile
index 87cc96e6fd1..5760052b430 100644
--- a/security/libsodium/Makefile
+++ b/security/libsodium/Makefile
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile,v 1.7 2015/01/16 11:39:32 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2015/11/21 09:21:40 wiz Exp $
-DISTNAME= libsodium-1.0.1
+DISTNAME= libsodium-1.0.6
CATEGORIES= security
-MASTER_SITES= http://download.libsodium.org/libsodium/releases/
+MASTER_SITES= https://download.libsodium.org/libsodium/releases/
-MAINTAINER= csosstudy@gmail.com
-HOMEPAGE= https://github.com/jedisct1/libsodium
+MAINTAINER= pkgsrc@NetBSD.org
+HOMEPAGE= https://download.libsodium.org/doc/
COMMENT= Library for build higher-level cryptographic tools
LICENSE= isc
diff --git a/security/libsodium/PLIST b/security/libsodium/PLIST
index 7065ae67c37..756bd8dacc2 100644
--- a/security/libsodium/PLIST
+++ b/security/libsodium/PLIST
@@ -1,6 +1,7 @@
-@comment $NetBSD: PLIST,v 1.5 2014/10/04 12:59:02 wiz Exp $
+@comment $NetBSD: PLIST,v 1.6 2015/11/21 09:21:40 wiz Exp $
include/sodium.h
include/sodium/core.h
+include/sodium/crypto_aead_aes256gcm.h
include/sodium/crypto_aead_chacha20poly1305.h
include/sodium/crypto_auth.h
include/sodium/crypto_auth_hmacsha256.h
diff --git a/security/libsodium/distinfo b/security/libsodium/distinfo
index 9de26ed646d..2b9201b2524 100644
--- a/security/libsodium/distinfo
+++ b/security/libsodium/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.8 2015/11/04 01:17:49 agc Exp $
+$NetBSD: distinfo,v 1.9 2015/11/21 09:21:40 wiz Exp $
-SHA1 (libsodium-1.0.1.tar.gz) = 23e6768b0ece2345e149a63f92a56f1087554c91
-RMD160 (libsodium-1.0.1.tar.gz) = 608cb1aeb07ff220cb97d4751cdba44ffbcd3c0f
-SHA512 (libsodium-1.0.1.tar.gz) = e8df31fd53251491b23b55ba3bde6bb77d0f271439697120b0b024165cb20ca8a4af9b0b01ca09950a3b3222b0030456978541ff3baae4883718ec37898d2435
-Size (libsodium-1.0.1.tar.gz) = 1651848 bytes
+SHA1 (libsodium-1.0.6.tar.gz) = 482eef4949a9d6c8f98acfb671111669977e06dc
+RMD160 (libsodium-1.0.6.tar.gz) = a95cceba248b4da74911c6a28220dc12dad9e97e
+SHA512 (libsodium-1.0.6.tar.gz) = f1232bfd31f8ba60650f594af469e48797924de0d2ce1e9bd0be75614e19b77727b3bcaa9a553cd5613db92738caea79edca5f2ff77ab392b1dff570dcd6be7d
+Size (libsodium-1.0.6.tar.gz) = 1791565 bytes