CVS commit: pkgsrc/security/nettle

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Jul 20 22:01:57 UTC 2019

Modified Files:
        pkgsrc/security/nettle: Makefile PLIST distinfo
        pkgsrc/security/nettle/patches: patch-Makefile.in

Log Message:
nettle: update to 3.5.1.

NEWS for the Nettle 3.5.1 release

        The Nettle-3.5.1 corrects a packaging mistake in Nettle-3.5.
        The new directory x86_64/sha_ni were missing in the tar file,
        breaking x86_64 builds with --enable-fat, and producing worse
        performance than promised for builds with --enable-x86-sha-ni.
        Also a few unused in-progress assembly files were accidentally
        included in the tar file.

        These problems are corrected in Nettle-3.5.1. There are no
        other changes, and also the library version numbers are
        unchanged.

NEWS for the Nettle 3.5 release

        This release adds a couple of new features and optimizations,
        and deletes or deprecates a few obsolete features. It is *not*
        binary (ABI) compatible with earlier versions. Except for
        deprecations listed below, it is intended to be fully
        source-level (API) compatible with Nettle-3.4.1.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0, with sonames libnettle.so.7 and
        libhogweed.so.5.

        Changes in behavior:

        * Nettle's gcm_crypt will now call the underlying block cipher
          to process more than one block at a time. This is not a
          change to the documented behavior, but unfortunately breaks
          assumptions accidentally made in GnuTLS, up to and including
          version 3.6.1.

        New features:

        * Support for CFB8 (Cipher Feedback Mode, processing a single
          octet per block cipher operation), contributed by Dmitry
          Eremin-Solenikov.

        * Support for CMAC (RFC 4493), contributed by Nikos
          Mavrogiannopoulos.

        * Support for XTS mode, contributed by Simo Sorce.

        Optimizations:

        * Improved performance of the x86_64 AES implementation using
          the aesni instructions. Gives a large speedup for operations
          processing multiple blocks at a time (including CTR mode,
          GCM mode, and CBC decrypt, but *not* CBC encrypt).

        * Improved performance for CTR mode, for the common case of
          16-byte block size. Pass more data at a time to underlying
          block cipher, and fill the counter blocks more efficiently.
          Extension to also handle GCM mode efficiently contributed
          by Nikos Mavrogiannopoulos.

        * New x86_64 implementation of sha1 and sha256, for processors
          supporting the sha_ni instructions. Speedup of 3-5 times on
          affected processors.

        * Improved parameters for the precomputation of tables used
          for ecc signatures. Roughly 10%-15% speedup of the ecdsa
          sign operation using the secp_256r1, secp_384r1 and
          secp_521r1 curves, and 25% speedup of ed25519 sign
          operation, benchmarked on x86_64. Table sizes unchanged,
          around 16 KB per curve.

        * In ARM fat builds, automatically select Neon implementation
          of Chacha, where possible. Contributed by Yuriy M.
          Kaminskiy.

        Deleted features:

        * The header file des-compat.h and everything declared therein
          has been deleted, as announced earlier. This file provided a
          subset of the old libdes/ssleay/openssl interface for DES
          and triple-DES. DES is still supported, via the functions
          declared in des.h.

        * Functions using the old struct aes_ctx have been marked as
          deprecated. Use the fixed key size interface instead, e.g.,
          struct aes256_ctx, introduced in Nettle-3.0.

        * The header file nettle-stdint.h, and corresponding autoconf
          tests, have been deleted. Nettle now requires that the
          compiler/libc provides <stdint.h>.

        Miscellaneous:

        * Support for big-endian ARM systems, contributed by Michael
          Weiser.

        * The programs aesdata, desdata, twofishdata, shadata and
          gcmdata are no longer built by default. Makefile
          improvements contributed by Jay Foad.

        * The "example" program examples/eratosthenes.c has been
          deleted.

        * The contents of hash context structs, and the deprecated
          aes_ctx struct, have been reorganized, to enable later
          optimizations.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.22 pkgsrc/security/nettle/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/security/nettle/PLIST
cvs rdiff -u -r1.17 -r1.18 pkgsrc/security/nettle/distinfo
cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/nettle/patches/patch-Makefile.in

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/nettle/Makefile
diff -u pkgsrc/security/nettle/Makefile:1.21 pkgsrc/security/nettle/Makefile:1.22
--- pkgsrc/security/nettle/Makefile:1.21        Thu Dec 13 10:49:38 2018
+++ pkgsrc/security/nettle/Makefile     Sat Jul 20 22:01:57 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.21 2018/12/13 10:49:38 gson Exp $
+# $NetBSD: Makefile,v 1.22 2019/07/20 22:01:57 wiz Exp $
 
-DISTNAME=      nettle-3.4.1
+DISTNAME=      nettle-3.5.1
 CATEGORIES=    devel security
 MASTER_SITES=  http://www.lysator.liu.se/~nisse/archive/
 MASTER_SITES+= ftp://ftp.lysator.liu.se/pub/security/lsh/

Index: pkgsrc/security/nettle/PLIST
diff -u pkgsrc/security/nettle/PLIST:1.8 pkgsrc/security/nettle/PLIST:1.9
--- pkgsrc/security/nettle/PLIST:1.8    Tue Nov 28 14:06:12 2017
+++ pkgsrc/security/nettle/PLIST        Sat Jul 20 22:01:57 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2017/11/28 14:06:12 wiz Exp $
+@comment $NetBSD: PLIST,v 1.9 2019/07/20 22:01:57 wiz Exp $
 bin/nettle-hash
 bin/nettle-lfib-stream
 bin/nettle-pbkdf2
@@ -20,9 +20,9 @@ include/nettle/ccm.h
 include/nettle/cfb.h
 include/nettle/chacha-poly1305.h
 include/nettle/chacha.h
+include/nettle/cmac.h
 include/nettle/ctr.h
 include/nettle/curve25519.h
-include/nettle/des-compat.h
 include/nettle/des.h
 include/nettle/dsa-compat.h
 include/nettle/dsa.h
@@ -44,7 +44,6 @@ include/nettle/md5.h
 include/nettle/memops.h
 include/nettle/memxor.h
 include/nettle/nettle-meta.h
-include/nettle/nettle-stdint.h
 include/nettle/nettle-types.h
 include/nettle/pbkdf2.h
 include/nettle/pgp.h
@@ -65,6 +64,7 @@ include/nettle/sha3.h
 include/nettle/twofish.h
 include/nettle/umac.h
 include/nettle/version.h
+include/nettle/xts.h
 include/nettle/yarrow.h
 info/nettle.info
 lib/libhogweed.la

Index: pkgsrc/security/nettle/distinfo
diff -u pkgsrc/security/nettle/distinfo:1.17 pkgsrc/security/nettle/distinfo:1.18
--- pkgsrc/security/nettle/distinfo:1.17        Sun Dec  9 20:11:40 2018
+++ pkgsrc/security/nettle/distinfo     Sat Jul 20 22:01:57 2019
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.17 2018/12/09 20:11:40 leot Exp $
+$NetBSD: distinfo,v 1.18 2019/07/20 22:01:57 wiz Exp $
 
-SHA1 (nettle-3.4.1.tar.gz) = 56a81ed4a8d35489d8bddd99d5262fe3958a52b4
-RMD160 (nettle-3.4.1.tar.gz) = ecf0b73ffa9020037161fa10bc3d7e0e578e5b3e
-SHA512 (nettle-3.4.1.tar.gz) = 26aefbbe9927e90e28f271e56d2ba876611831222d0e1e1a58bdb75bbd50934fcd84418a4fe47b845f557e60a9786a72a4de2676c930447b104f2256aca7a54f
-Size (nettle-3.4.1.tar.gz) = 1947053 bytes
-SHA1 (patch-Makefile.in) = 96771c1fb195603d108717970eb32767d2c26799
+SHA1 (nettle-3.5.1.tar.gz) = 077a71eef4a62acc4480ff7e2051f806b1724ea2
+RMD160 (nettle-3.5.1.tar.gz) = 01beaf91c0eb97a2b4def7a2733e030c0aaddec1
+SHA512 (nettle-3.5.1.tar.gz) = f738121b9091cbe79435fb5d46b45cf6f10912320c233829356908127bab1cac6946ca56e022a832380c44f2c10f21d2feef64cb0f4f41e3da4a681dc0131784
+Size (nettle-3.5.1.tar.gz) = 1989593 bytes
+SHA1 (patch-Makefile.in) = 5509ddde8b3ab98f07ffb7ec4d21e65ade28b42c
 SHA1 (patch-aa) = 2332668b077a6e3a1add603c87f60167755554ec
 SHA1 (patch-config.make.in) = 708fb3cac9c44825e0d231541cbecade2239c850
 SHA1 (patch-testsuite_Makefile.in) = 98db291808e0db7c7ec1e64facf56a956b226bc1

Index: pkgsrc/security/nettle/patches/patch-Makefile.in
diff -u pkgsrc/security/nettle/patches/patch-Makefile.in:1.6 pkgsrc/security/nettle/patches/patch-Makefile.in:1.7
--- pkgsrc/security/nettle/patches/patch-Makefile.in:1.6        Sun Aug 23 14:22:10 2015
+++ pkgsrc/security/nettle/patches/patch-Makefile.in    Sat Jul 20 22:01:57 2019
@@ -1,18 +1,9 @@
-$NetBSD: patch-Makefile.in,v 1.6 2015/08/23 14:22:10 wiz Exp $
+$NetBSD: patch-Makefile.in,v 1.7 2019/07/20 22:01:57 wiz Exp $
 
 Use LIBTOOL.
 
 --- Makefile.in.orig   2015-04-24 17:22:03.000000000 +0000
 +++ Makefile.in
-@@ -17,7 +17,7 @@ OPT_HOGWEED_OBJS = @OPT_HOGWEED_OBJS@
- 
- OPT_NETTLE_SOURCES = @OPT_NETTLE_SOURCES@
- 
--SUBDIRS = tools testsuite examples
-+SUBDIRS = tools testsuite
- 
- include config.make
- 
 @@ -25,7 +25,7 @@ PRE_CPPFLAGS = -I.
  EXTRA_CFLAGS = $(CCPIC)