summaryrefslogtreecommitdiff
path: root/security/libgcrypt
AgeCommit message (Collapse)AuthorFilesLines
2014-07-18Fix build under SCO OpenServer 5.0.7/3.2.ryoon3-2/+34
2014-04-01Add patch for build fix on Darwin PPC.obache2-1/+22
PR pkg/48655 by Jason Bacon.
2014-03-14Drop inclusion of mk/pthread.buildlink3.mk from libgcrypt bl3.gdt1-2/+1
libgcrypt installs a library and 3 binaries, none of which are linked against pthreads (on NetBSD 6). It installs one .h, which also does not reference pthreads. However, it contains a comment that thread callbacks were removed from libgcrypt as of 1.6. I rebuilt dirmngr, glib-networking, gnupg2, libgnome-keyring, libksba, libotr, libxslt, and pidgin-otr with the new version with no issues. Note that I am not removing mk/pthread.buildlink3.mk from Makefile, because it builds t-lock (used in make test but not installed) with threads.
2014-02-03Update to 1.6.1. Remove lots of integrated patches.wiz7-1745/+6
Noteworthy changes in version 1.6.1 (2014-01-29) ------------------------------------------------ * Added emulation for broken Whirlpool code prior to 1.6.0. * Improved performance of KDF functions. * Improved ECDSA compliance. * Fixed locking for Windows and non-ELF Pthread systems (regression in 1.6.0) * Fixed message digest lookup by OID (regression in 1.6.0). * Fixed a build problem on NetBSD. * Fixed memory leaks in ECC code. * Fixed some asm build problems and feature detection bugs. * Interface changes relative to the 1.6.0 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ GCRY_MD_FLAG_BUGEMU1 NEW (minor API change).
2014-01-13Use upstream way to fix.obache2-14/+47
2014-01-11Fix PR pkg/48510 pkgsrc/security/libgcrypt:ryoon5-1/+1681
Add blowfish/serpent ARM assembly files to Makefile.am * Add patches from upstream git repository * Tested on NetBSD/evbearmv6hf-el 6.99.28
2014-01-08change to better URL for BTS.obache2-4/+4
2014-01-08Note upstream bug report.obache2-3/+4
2014-01-08Use system supplied bswap32 and bswap64 macros on NetBSD.obache2-1/+26
Fixes build on NetBSD-5-i386 with builtin gcc.
2014-01-07revise recent -Wa,--divide usage for SunOS to allow only SunOS x86_64richard3-4/+92
and naturally non-gcc/non-gas builds by patching configure instead (adapted from configure.ac in the works upstream).
2014-01-02cipher/sha1-ssse3-amd64.S suffers a supposedly "infamous" problem whereinrichard1-1/+3
expressions containing a '/' (divide) are problematic because according to the SUN x86 Assembly Language Reference Manual, '/' should be treated as starting comments. To get over this, gas has '--divide' do not treat `/' as a comment character
2014-01-01Update to 1.6.0:wiz7-115/+11
Noteworthy changes in version 1.6.0 (2013-12-16) ------------------------------------------------ * Removed the long deprecated gcry_ac interface. Thus Libgcrypt is not anymore ABI compatible to previous versions if they used the ac interface. * Removed the module register subsystem. * The deprecated message digest debug macros have been removed. Use gcry_md_debug instead. * Removed deprecated control codes. * Improved performance of most cipher algorithms as well as for the SHA family of hash functions. * Added support for the IDEA cipher algorithm. * Added support for the Salsa20 and reduced Salsa20/12 stream ciphers. * Added limited support for the GOST 28147-89 cipher algorithm. * Added support for the GOST R 34.11-94 and R 34.11-2012 (Stribog) hash algorithms. * Added a random number generator to directly use the system's RNG. Also added an interface to prefer the use of a specified RNG. * Added support for the SCRYPT algorithm. * Mitigated the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See <http://eprint.iacr.org/2013/448> [CVE-2013-4242]. * Added support for Deterministic DSA as per RFC-6969. * Added support for curve Ed25519. * Added a scatter gather hash convenience function. * Added several MPI amd SEXP helper functions. * Added support for negative numbers to gcry_mpi_print, gcry_mpi_aprint and gcry_mpi_scan. * The algorithm ids GCRY_PK_ECDSA and GCRY_PK_ECDH are now deprecated. Use GCRY_PK_ECC if you need an algorithm id. * Changed gcry_pk_genkey for "ecc" to only include the curve name and not the parameters. The flag "param" may be used to revert this. * Added a feature to globally disable selected hardware features. * Added debug helper functions.
2013-07-25Update to 1.5.3:wiz2-6/+6
Noteworthy changes in version 1.5.3 (2013-07-25) ------------------------------------------------ * Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See <http://eprint.iacr.org/2013/448>.
2013-04-21Update to 1.5.2.wiz7-123/+8
XXX: lots of patches without comments, and not upstreamed it seems. Noteworthy changes in version 1.5.2 (2013-04-18) ------------------------------------------------ * Added support for IDEA. * Made the Padlock code work again (regression since 1.5.0). * Fixed alignment problems for Serpent. * Fixed two bugs in ECC computations.
2013-04-11remove obsolete patch, fixes build on DragonFly, from David Shaodrochner2-37/+1
per PR pkg/47735
2013-04-10update to 1.5.1drochner3-25/+9
changes: minor fixes
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2012-04-03Fix building with clang on i386 (PR#46177)adam1-1/+5
2012-01-20remove restrictions related to idea and mdc2 patents - both are expireddrochner1-6/+1
2011-11-29Fix compilation failure:cheusov2-5/+13
./src/.libs/libgcrypt.so: undefined reference to `assert'
2011-07-15disable AESNI support for now, until we have a method to tell whetherdrochner1-1/+2
the assembler supports the needed SSE commands, to allow building on NetBSD-5, in response to a report by Marc Baudoin to pkgsrc-users
2011-07-14Re-add entries for gcrypt.tar.bz2 which neede by idea PKG_OPTIONS.taca1-1/+4
2011-07-13Changes 1.5.0:adam12-53/+88
* New function gcry_kdf_derive implementing OpenPGP S2K algorithms and PBKDF2. * Support for WindowsCE. * Support for ECDH. * Support for OAEP and PSS methods as described by RFC-3447. * Fixed PKCS v1.5 code to always return the leading zero. * New format specifiers "%M" and "%u" for gcry_sexp_build. * Support opaque MPIs with "%m" and "%M" in gcry_sexp_build. * New functions gcry_pk_get_curve and gcry_pk_get_param to map ECC parameters to a curve name and to retrieve parameter values. * gcry_mpi_cmp applied to opaque values has a defined semantic now. * Uses the Intel AES-NI instructions if available. * The use of the deprecated Alternative Public Key Interface (gcry_ac_*) will now print compile time warnings. * The module register subsystem has been deprecated. This subsystem is not flexible enough and would always require ABI changes to extend the internal interfaces. It will eventually be removed. Please contact us on the gcrypt-devel mailing list to discuss whether you really need this feature or how it can be replaced by an internal plugin mechanism. * CTR mode may now be used with data chunks of arbitrary length.
2011-04-22recursive bump from gettext-lib shlib bump.obache2-4/+4
2011-02-19don't enable padlock support on NetBSD by default, it crashes on padlockjmcneill2-2/+6
capable CPUs
2010-11-13Follow HTTP redirects to new HOMEPAGEs and/or MASTER_SITES.shattered1-2/+2
2010-07-27Add information for libgcrypt-1.4.6/gcrypt.tar.bz2 which is needed withtaca1-1/+4
idea PKG_OPTION. Fix PR pkg/43675 reported by Ryo HAYASAKA.
2010-07-23Changes in version 1.4.6:adam2-9/+6
* New variants of the TIGER algorithm. * New cipher algorithm mode for AES-WRAP. * Interface changes relative to the 1.4.2 release: GCRY_MD_TIGER1 NEW. GCRY_MD_TIGER2 NEW. GCRY_CIPHER_MODE_AESWRAP NEW.
2009-12-18put back the (non-default) "idea" option which got lost a while agodrochner7-7/+127
2009-12-15Update to 1.4.5:wiz2-8/+7
Noteworthy changes in version 1.4.5 (2009-12-11) ------------------------------------------------ * Fixed minor memory leak in DSA key generation. * No more switching to FIPS mode if /proc/version is not readable. * Fixed a sigill during Padlock detection on old CPUs. * Fixed a hang on some W2000 machines. * Boosted SHA-512 performance by 30% on ia32 boxes and gcc 4.3; SHA-256 went up by 25%.
2009-05-19Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENTwiz1-3/+3
block). Uncomment some commented out LICENSE lines while here.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2009-01-31Changes 1.4.4:adam4-20/+8
* Publish GCRY_MODULE_ID_USER and GCRY_MODULE_ID_USER_LAST constants. This functionality has been in Libgcrypt since 1.3.0. * MD5 may now be used in non-enforced fips mode. * Fixed HMAC for SHA-384 and SHA-512 with keys longer than 64 bytes. * In fips mode, RSA keys are now generated using the X9.31 algorithm and DSA keys using the FIPS 186-2 algorithm. * The transient-key flag is now also supported for DSA key generation. DSA domain parameters may be given as well.
2008-10-29Add patch-ag.wiz1-1/+2
2008-10-29"return _gcry_rngfips_deinit_external_test (context);"shannonjr1-0/+11
is incorrect because: 1) _gcry_rngfips_deinit_external_test() is void function 2) the calling function, random, is declared void The unpatched code will not compile with Sun compiler.
2008-10-14Changes 1.4.3:adam8-38/+40
* Try to auto-initialize Libgcrypt to minimize the effect of applications not doing that correctly. This is not a perfect solution but given that many applicationion would totally fail without such a hack, we try to help at least with the most common cases. Folks, please read the manual to learn how to properly initialize Libgcrypt! * Auto-initialize the secure memory to 32k instead of aborting the process. * Log fatal errors via syslog. * Changed the name and the semantics of the fips mode config file. * Add convenience macro gcry_fips_mode_active. * More self-tests. * Documentation cleanups.
2008-08-14Remove idea option -- I can't find a patch for the current PKGVERSION.wiz1-24/+2
Addresses PR 39316.
2008-04-29Update to 1.4.1:wiz4-46/+6
Noteworthy changes in version 1.4.1 (2008-04-25) ------------------------------------------------ * Fixed a bug introduced by 1.3.1 which led to the comsumption of far too much entropy for the intial seeding. * Improved AES performance for CFB and CBC modes. * Removed build problems for the Padlock support.
2008-03-26Add a new option "via-padlock" which enables support for thetron2-11/+21
VIA PadLock Security Engine: - The new option is turned on by default. - The new option is only available on i386 systems except Mac OS X (which doesn't work on VIA CPU). - The new option isn't available on system which uses GCC 3.x because it causes build failures. This fixes PR pkg/38197. Approved by Dieter Baron.
2008-03-25Readd checksum for "libgcrypt-1.2.4-idea.diff.bz2" which was accidentallytron1-1/+4
removed in revision 1.22.
2008-03-16Add a hack for GCC 3.* failing to compile asm() call inseb1-1/+8
cipher/rijndael.c:do_padlock(): seen with GCC 3.3.3 on NetBSD.
2008-03-11Fix build with MIPSPro. PR pkg/38210.tnn2-1/+24
2008-03-07Update to 1.4.0:wiz6-38/+24
Noteworthy changes in version 1.4.0 (2007-12-10) ------------------------------------------------ * New configure option --disable-padlock-support which is mostly useful in case of build problems. Noteworthy changes in version 1.3.2 (2007-12-03) ------------------------------------------------ * The visibility attribute is now used if supported by the toolchain. * The ACE engine of VIA processors is now used for AES-128. * The ASN.1 DER template for SHA-224 has been fixed. Noteworthy changes in version 1.3.1 (2007-10-26) ------------------------------------------------ * The entire library is now under the LGPL. The helper programs and the manual are under the GPL. Kudos to Peter Gutmann for giving permissions to relicense the rndw32 and rndunix modules. * The Camellia cipher is now under the LGPL and included by default. * Fixed a bug in the detection of symbol prefixes which inhibited the build of optimzied assembler code on certain systems. * Updated the entropy gatherer for W32. Noteworthy changes in version 1.3.0 (2007-05-04) ------------------------------------------------ * Changed the way the RNG gets initialized. This allows to keep it uninitialized as long as no random numbers are used. To override this, the new macro gcry_fast_random_poll may be used. It is in general a good idea to spread this macro into the application code to make sure that these polls happen often enough. * Made the RNG immune against fork without exec. * Reading and writing the random seed file is now protected by a fcntl style file lock on systems that provide this function. * Support for SHA-224 and HMAC using SHA-384 and SHA-512. * Support for the SEED cipher. * Support for the Camellia cipher. Note that Camellia is disabled by default, and that enabling it changes the license of libgcrypt from LGPL to GPL. * Support for OFB encryption mode. * gcry_mpi_rshift does not anymore truncate the shift count. * Reserved algorithm ranges for use by applications. * Support for DSA2. * The new function gcry_md_debug should be used instead of the gcry_md_start_debug and gcry_md_stop_debug macros. * New configure option --enable-random-daemon to support a system wide random daemon. The daemon code is experimental and not yet very well working. It will eventually allow to keep a global random pool for the sake of short living processes. * Non executable stack support is now used by default on systems supporting it. * Support for Microsoft Windows. * Assembler support for the AMD64 architecture. * New configure option --enable-mpi-path for optimized builds. * Experimental support for ECDSA; should only be used for testing. * New control code GCRYCTL_PRINT_CONFIG to print the build configuration. * Minor changes to some function declarations. Buffer arguments are now typed as void pointer. This should not affect any compilation. Fixed two bugs in return values and clarified documentation. * Interface changes relative to the 1.2.0 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ gcry_fast_random_poll NEW gcry_md_debug NEW gcry_sexp_nth_string NEW GCRY_MD_SHA224 NEW GCRY_PK_USAGE_CERT NEW GCRY_PK_USAGE_AUTH NEW GCRY_PK_USAGE_UNKN NEW GCRY_PK_ECDSA NEW GCRY_CIPHER_SEED NEW GCRY_CIPHER_CAMELLIA128 NEW GCRY_CIPHER_CAMELLIA192 NEW GCRY_CIPHER_CAMELLIA256 NEW GCRYCTL_FAKED_RANDOM_P NEW GCRYCTL_PRINT_CONFIG NEW GCRYCTL_SET_RNDEGD_SOCKET NEW. gcry_mpi_scan CHANGED: Argument BUFFER is now void*. gcry_pk_algo_name CHANGED: Returns "?" instead of NULL. gcry_cipher_algo_name CHANGED: Returns "?" instead of "". gcry_pk_spec_t CHANGED: Element ALIASES is now const ptr. gcry_md_write_t CHANGED: Argument BUF is now a const void*. gcry_md_ctl CHANGED: Argument BUFFER is now void*. gcry_cipher_encrypt CHANGED: Arguments IN and OUT are now void*. gcry_cipher_decrypt CHANGED: Arguments IN and OUT are now void*. gcry_sexp_sprint CHANGED: Argument BUFFER is now void*. gcry_create_nonce CHANGED: Argument BUFFER is now void*. gcry_randomize CHANGED: Argument BUFFER is now void*. gcry_cipher_register CHANGED: Argument ALGORITHM_ID is now int*.
2007-08-29Add support for idea option. From Blair Sadewitz in private mail, withwiz3-2/+35
some cleanup.
2007-04-28PR 36233: Make libgcrypt build on NetBSD/hp700. From David H. Gutteridge.tnn1-2/+3
Also makes it build on HP-UX and Linux/hppa, tested by me.
2007-02-03Update to 1.2.4:wiz6-31/+29
Noteworthy changes in version 1.2.4 (2007-02-01) ------------------------------------------------ * Fixed a bug in the memory allocator which could have been the reason for some of non-duplicable bugs. * Other minor bug fixes.
2007-01-30Put macro argument in parentheses. From Naoto Morishima in PR 35519.wiz3-3/+18
Bump PKGREVISION.
2006-11-05DESTDIR support.joerg1-1/+2
2006-10-04Update MASTER_SITES and/or HOMEPAGE, from Sergey Svishchev.wiz1-2/+2
2006-09-06libgcrypt 1.2.3 may have fixed the name of the random device on NetBSD butmarkd3-2/+17
it broke the name of the urandom device. Bump PKGREVISION
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-28 14:53:30 +0000