baserev update by copy to link target

• Files Changed
• Browse Source

- Add the architecture specific READMEs as provided by upstream.

- update to 3.9.1: [bsc#1212112, CVE-2023-36660]

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Include the nettle library manual in HTML and PDF formats in
  the devel package.

- update to 3.9.1: [bsc#1212112]

• Files Changed
• Browse Source

libnettle 3.9.1

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

libnettle 3.9

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Build AVX2 enabled hwcaps library for x86_64-v3

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 3.8.1:
  * Avoid non-posix m4 argument references in the chacha
    implementation for arm64, powerpc64 and s390x. Reported by
    Christian Weisgerber, fix contributed by Mamone Tarsha.
  * Use explicit .machine pseudo-ops where needed in s390x
    assembly files. Bug report by Andreas K. Huettel, fix
    contributed by Mamone Tarsha.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Make shared libraries executable

• Files Changed
• Browse Source

- Provide s390x CPACF/SHA/AES Support for Crypto Libraries
  * Add libnettle-s390x-CPACF-SHA-AES-support.patch [jsc#SLE-20733]

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060]

• Files Changed
• Browse Source

- GNU Nettle 3.7.3:
  * Fix crash for zero input to rsa_sec_decrypt and
    rsa_decrypt_tr. Potential denial of service vector.
  * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return
    failure for out of range inputs, instead of either crashing,
    or silently reducing input modulo n. Potential denial of
    service vector.
  * Ensure that rsa_decrypt returns failure for out of range
    inputs, instead of silently reducing input modulo n.
  * Ensure that rsa_sec_decrypt returns failure if the message
    size is too large for the given key. Unlike the other bugs,
    this would typically be triggered by invalid local
    configuration, rather than by processing untrusted remote
    data.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source