pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/security/nettle nettle: update to 3.5.1.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/6ad7c79c1d62
branches:  trunk
changeset: 336688:6ad7c79c1d62
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Sat Jul 20 22:01:57 2019 +0000

description:
nettle: update to 3.5.1.

NEWS for the Nettle 3.5.1 release

        The Nettle-3.5.1 corrects a packaging mistake in Nettle-3.5.
        The new directory x86_64/sha_ni were missing in the tar file,
        breaking x86_64 builds with --enable-fat, and producing worse
        performance than promised for builds with --enable-x86-sha-ni.
        Also a few unused in-progress assembly files were accidentally
        included in the tar file.

        These problems are corrected in Nettle-3.5.1. There are no
        other changes, and also the library version numbers are
        unchanged.

NEWS for the Nettle 3.5 release

        This release adds a couple of new features and optimizations,
        and deletes or deprecates a few obsolete features. It is *not*
        binary (ABI) compatible with earlier versions. Except for
        deprecations listed below, it is intended to be fully
        source-level (API) compatible with Nettle-3.4.1.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0, with sonames libnettle.so.7 and
        libhogweed.so.5.

        Changes in behavior:

        * Nettle's gcm_crypt will now call the underlying block cipher
          to process more than one block at a time. This is not a
          change to the documented behavior, but unfortunately breaks
          assumptions accidentally made in GnuTLS, up to and including
          version 3.6.1.

        New features:

        * Support for CFB8 (Cipher Feedback Mode, processing a single
          octet per block cipher operation), contributed by Dmitry
          Eremin-Solenikov.

        * Support for CMAC (RFC 4493), contributed by Nikos
          Mavrogiannopoulos.

        * Support for XTS mode, contributed by Simo Sorce.

        Optimizations:

        * Improved performance of the x86_64 AES implementation using
          the aesni instructions. Gives a large speedup for operations
          processing multiple blocks at a time (including CTR mode,
          GCM mode, and CBC decrypt, but *not* CBC encrypt).

        * Improved performance for CTR mode, for the common case of
          16-byte block size. Pass more data at a time to underlying
          block cipher, and fill the counter blocks more efficiently.
          Extension to also handle GCM mode efficiently contributed
          by Nikos Mavrogiannopoulos.

        * New x86_64 implementation of sha1 and sha256, for processors
          supporting the sha_ni instructions. Speedup of 3-5 times on
          affected processors.

        * Improved parameters for the precomputation of tables used
          for ecc signatures. Roughly 10%-15% speedup of the ecdsa
          sign operation using the secp_256r1, secp_384r1 and
          secp_521r1 curves, and 25% speedup of ed25519 sign
          operation, benchmarked on x86_64. Table sizes unchanged,
          around 16 KB per curve.

        * In ARM fat builds, automatically select Neon implementation
          of Chacha, where possible. Contributed by Yuriy M.
          Kaminskiy.

        Deleted features:

        * The header file des-compat.h and everything declared therein
          has been deleted, as announced earlier. This file provided a
          subset of the old libdes/ssleay/openssl interface for DES
          and triple-DES. DES is still supported, via the functions
          declared in des.h.

        * Functions using the old struct aes_ctx have been marked as
          deprecated. Use the fixed key size interface instead, e.g.,
          struct aes256_ctx, introduced in Nettle-3.0.

        * The header file nettle-stdint.h, and corresponding autoconf
          tests, have been deleted. Nettle now requires that the
          compiler/libc provides <stdint.h>.

        Miscellaneous:

        * Support for big-endian ARM systems, contributed by Michael
          Weiser.

        * The programs aesdata, desdata, twofishdata, shadata and
          gcmdata are no longer built by default. Makefile
          improvements contributed by Jay Foad.

        * The "example" program examples/eratosthenes.c has been
          deleted.

        * The contents of hash context structs, and the deprecated
          aes_ctx struct, have been reorganized, to enable later
          optimizations.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0.

diffstat:

 security/nettle/Makefile                  |   4 ++--
 security/nettle/PLIST                     |   6 +++---
 security/nettle/distinfo                  |  12 ++++++------
 security/nettle/patches/patch-Makefile.in |  11 +----------
 4 files changed, 12 insertions(+), 21 deletions(-)

diffs (91 lines):

diff -r 003cbaa36fbd -r 6ad7c79c1d62 security/nettle/Makefile
--- a/security/nettle/Makefile  Sat Jul 20 21:51:28 2019 +0000
+++ b/security/nettle/Makefile  Sat Jul 20 22:01:57 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.21 2018/12/13 10:49:38 gson Exp $
+# $NetBSD: Makefile,v 1.22 2019/07/20 22:01:57 wiz Exp $
 
-DISTNAME=      nettle-3.4.1
+DISTNAME=      nettle-3.5.1
 CATEGORIES=    devel security
 MASTER_SITES=  http://www.lysator.liu.se/~nisse/archive/
 MASTER_SITES+= ftp://ftp.lysator.liu.se/pub/security/lsh/
diff -r 003cbaa36fbd -r 6ad7c79c1d62 security/nettle/PLIST
--- a/security/nettle/PLIST     Sat Jul 20 21:51:28 2019 +0000
+++ b/security/nettle/PLIST     Sat Jul 20 22:01:57 2019 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2017/11/28 14:06:12 wiz Exp $
+@comment $NetBSD: PLIST,v 1.9 2019/07/20 22:01:57 wiz Exp $
 bin/nettle-hash
 bin/nettle-lfib-stream
 bin/nettle-pbkdf2
@@ -20,9 +20,9 @@
 include/nettle/cfb.h
 include/nettle/chacha-poly1305.h
 include/nettle/chacha.h
+include/nettle/cmac.h
 include/nettle/ctr.h
 include/nettle/curve25519.h
-include/nettle/des-compat.h
 include/nettle/des.h
 include/nettle/dsa-compat.h
 include/nettle/dsa.h
@@ -44,7 +44,6 @@
 include/nettle/memops.h
 include/nettle/memxor.h
 include/nettle/nettle-meta.h
-include/nettle/nettle-stdint.h
 include/nettle/nettle-types.h
 include/nettle/pbkdf2.h
 include/nettle/pgp.h
@@ -65,6 +64,7 @@
 include/nettle/twofish.h
 include/nettle/umac.h
 include/nettle/version.h
+include/nettle/xts.h
 include/nettle/yarrow.h
 info/nettle.info
 lib/libhogweed.la
diff -r 003cbaa36fbd -r 6ad7c79c1d62 security/nettle/distinfo
--- a/security/nettle/distinfo  Sat Jul 20 21:51:28 2019 +0000
+++ b/security/nettle/distinfo  Sat Jul 20 22:01:57 2019 +0000
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.17 2018/12/09 20:11:40 leot Exp $
+$NetBSD: distinfo,v 1.18 2019/07/20 22:01:57 wiz Exp $
 
-SHA1 (nettle-3.4.1.tar.gz) = 56a81ed4a8d35489d8bddd99d5262fe3958a52b4
-RMD160 (nettle-3.4.1.tar.gz) = ecf0b73ffa9020037161fa10bc3d7e0e578e5b3e
-SHA512 (nettle-3.4.1.tar.gz) = 26aefbbe9927e90e28f271e56d2ba876611831222d0e1e1a58bdb75bbd50934fcd84418a4fe47b845f557e60a9786a72a4de2676c930447b104f2256aca7a54f
-Size (nettle-3.4.1.tar.gz) = 1947053 bytes
-SHA1 (patch-Makefile.in) = 96771c1fb195603d108717970eb32767d2c26799
+SHA1 (nettle-3.5.1.tar.gz) = 077a71eef4a62acc4480ff7e2051f806b1724ea2
+RMD160 (nettle-3.5.1.tar.gz) = 01beaf91c0eb97a2b4def7a2733e030c0aaddec1
+SHA512 (nettle-3.5.1.tar.gz) = f738121b9091cbe79435fb5d46b45cf6f10912320c233829356908127bab1cac6946ca56e022a832380c44f2c10f21d2feef64cb0f4f41e3da4a681dc0131784
+Size (nettle-3.5.1.tar.gz) = 1989593 bytes
+SHA1 (patch-Makefile.in) = 5509ddde8b3ab98f07ffb7ec4d21e65ade28b42c
 SHA1 (patch-aa) = 2332668b077a6e3a1add603c87f60167755554ec
 SHA1 (patch-config.make.in) = 708fb3cac9c44825e0d231541cbecade2239c850
 SHA1 (patch-testsuite_Makefile.in) = 98db291808e0db7c7ec1e64facf56a956b226bc1
diff -r 003cbaa36fbd -r 6ad7c79c1d62 security/nettle/patches/patch-Makefile.in
--- a/security/nettle/patches/patch-Makefile.in Sat Jul 20 21:51:28 2019 +0000
+++ b/security/nettle/patches/patch-Makefile.in Sat Jul 20 22:01:57 2019 +0000
@@ -1,18 +1,9 @@
-$NetBSD: patch-Makefile.in,v 1.6 2015/08/23 14:22:10 wiz Exp $
+$NetBSD: patch-Makefile.in,v 1.7 2019/07/20 22:01:57 wiz Exp $
 
 Use LIBTOOL.
 
 --- Makefile.in.orig   2015-04-24 17:22:03.000000000 +0000
 +++ Makefile.in
-@@ -17,7 +17,7 @@ OPT_HOGWEED_OBJS = @OPT_HOGWEED_OBJS@
- 
- OPT_NETTLE_SOURCES = @OPT_NETTLE_SOURCES@
- 
--SUBDIRS = tools testsuite examples
-+SUBDIRS = tools testsuite
- 
- include config.make
- 
 @@ -25,7 +25,7 @@ PRE_CPPFLAGS = -I.
  EXTRA_CFLAGS = $(CCPIC)
  



Home | Main Index | Thread Index | Old Index