Bump to Botan 3.9.0

Botan-3.6.1.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmccy+oACgkQYhHr8e+6
-37z+nAgAkCc0snrZv7Nl5pkI5k8NC54nBjDwJDBGrIkm4LnyYwJiF5ZLwlAp8HrX
-2gZ4Rn9VNmMj4bW2JyCWoaia4j/5GXawscJ4AIY4ECJSkF0ye4VLKmYZIiRNiNQX
-Db3W9df5mUQI7DogcBQBHjsq2qNcHot3DRZTsQOIZioS3pMxVS/2IWWTaSkzrS8c
-bg3TfeeeBl1WfUoDL8ybNWjMUQxEi+6D0Fv3FROqv4CielTg8SnoN7FJSnq0mTJI
-6/cMv6nC/W+E2HT3IAYyIq0t6NYBNsjJ+8SniY3nPosVHZiHzRLqMRw3RMXiy41J
-Dmp/IDo65ww/SSuaII+HtbHIsKijJw==
-=y+M3
------END PGP SIGNATURE-----

Botan-3.9.0.tar.xz.asc

@@ -0,0 +1,12 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmiR/HIACgkQYhHr8e+6
+37wRmAf9EoqMLsOopra70taepZgw8g8qAZyMqz2Ovv9lvR/8yI8lMdODYyxxymA2
+saW9QBtiLEp/Y0RI3Sl7zUqdUlAhczZXiNKGfqDdmcG0Fdp8Suq8kam/C7XYB/VO
+f44+Gzxq46L8NftR0Rld3IgJm1eloq1zrOo4pMJbuCjVRu7wViu9ZNDTLpCUzN0M
+0Vqp9YfOJdFyBcz/V6zuS+1yFkeyFT2ZdAz654hikJZjzdu7vBDm0ssbTQGq0t7l
+Du9e+xwLukoCGEOvv1eTqR2ShHAG4QWCefxoStvf07mFC5x/D0GjeCKr0aV+v2F7
+QgTtWw5nuBDNcwdqB7G6/YraYkc5Ig==
+=utT7
+-----END PGP SIGNATURE-----
+

Botan.changes

@@ -1,3 +1,57 @@
+-------------------------------------------------------------------
+Fri Aug 22 07:30:18 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to Botan 3.9.0
+    
+  * Add SHA-1 implementation using AVX2/BMI2 (GH #4852)
+  * Add Camellia implementation using GFNI/AVX2 (GH #4848)
+  * Add SHACAL2 implementation using AVX512 (GH #4878)
+  * The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900)
+  * Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776)
+  * Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886)
+  * Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991)
+  * Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950)
+  * Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888)
+  * Optimizations for X448 and Ed448 (GH #5037)
+  * Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853)
+  * Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024)
+
+For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05
+
+-------------------------------------------------------------------
+Tue Jun 17 08:43:06 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to 3.8.1
+
+  * Discussion has started regarding plans for Botan4, current ETA 2027.
+  * Ongoing elliptic curve optimizations and cleanups
+  * Add support for SM4 instructions added in upcoming Intel processors
+  * Add support for extended private keys in ML-KEM to handle certain implementations which do not use the seed encoding.
+  * Add support for SHA-512 instructions added in upcoming Intel processors
+  * The SHA-1 implementation using SSE2 has been extended to support NEON and LoongArch LSX.
+  * The default TLS policy now prefers AES/GCM over ChaCha20Poly1305
+  * Add support for TLS 1.3 post-quantum KEM secp384r1/ML-KEM-1024
+
+For a full changelog, see: https://botan.randombit.net/news.html#version-3-8-1-2025-05-07 
+
+-------------------------------------------------------------------
+Wed Mar 12 09:02:29 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.7.1, latest stable release
+
+* Revert a change that prevented build.h from being usable from C applications. 
+* Add post-quantum scheme Classic McEliece 
+* In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers. 
+* Support for the pre-standard Kyber-r3 key exchange has been removed from TLS 
+* In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites. 
+* Add new EC key constructors 
+* Internal EC optimizations and improvements
+* Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
+* Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
+* TPM 2.0 improvements 
+* Fix a build issue when compiling with MSVC on ARM
+* Find full changelog at: https://botan.randombit.net/news.html 
+
 -------------------------------------------------------------------
 Tue Nov  5 08:16:35 UTC 2024 - Stephan Hemeier <Sauerlandlinux@gmx.de>
 

Botan.spec

@@ -17,10 +17,10 @@
 #
 
 
-%define version_suffix 3-6
+%define version_suffix 3-9
 %define short_version 3
 Name:           Botan
-Version:        3.6.1
+Version:        3.9.0
 Release:        0
 Summary:        A C++ Crypto Library
 License:        BSD-2-Clause

baselibs.conf

@@ -1,4 +1,4 @@
-libbotan-3-6
+libbotan-3-9
 libbotan-devel
 	requires -libbotan-<targettype> = <version>
-	requires "libbotan-3-6-<targettype> = <version>"
+	requires "libbotan-3-9-<targettype> = <version>"