Bump to 3.8.1

In some rare conditions, Botan 3.6.0 has problems with Processors, see:
https://botan.randombit.net/news.html#version-3-6-1-2024-10-26

Botan-2.19.5.tar.xz.asc

@@ -1,12 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmaL/agACgkQYhHr8e+6
-37wGJggAnreZh5SxH/FQTgeLtLD+Fb11cnyBstQeWuJq0Np/bPSsEzwgMLu9F/0/
-DWOH74eDLds8FUhh/w39bOkNgd2r6FTBLjnN1g8M86jsTg7ILlG04tbc1GF79Mx8
-GxDBdfNsKmqKEzVJBWHbwnqjvOR9oO2bdKLe2NCJ9jyrw5xyHNhfOEG7zXzpfFFN
-DM16kl2OVYnYrbDQyVGW9JNi+038qyR3fBfkWInOd8WoiimrOTk5+HuBL06RhWGN
-yiHT9P5AK/45fhCcs0yFiUpfrz85MfqqT6vIygV7v2fDElfpTX12LB1I7id8QyDN
-m9gqpB0mP0ewxaO0sIuV0UXk+ntfDg==
-=IUJq
------END PGP SIGNATURE-----
-

Botan-3.8.1.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmgb150ACgkQYhHr8e+6
+37z2cAf+JlFjfrZsBGIz9iFYcPD9NrvHeNp0FBOyPS9Swyy4BMW6VZVnNnWais+U
+V+kywsS6dW8ofqkYbJNSJ7lZI7XYpqAGkXiQSYxdscsU+rCYHptjwC7f03q4n2DR
+u/rGP8aGROpMOZ+2m5jT1Pa6fTG7zbnloW5An7x0KdjjNJSreVvYbhHU89b6QO1Q
+pStX0NQq5M3ky6r3cI3Ik2qnN6bWC1GUOLryJyFYgwxHSH3p6WUrvC/p0CpT1g8x
+Wq8TxTtpNTxXcbp2VMYrHesPdUUl7vJD4C7FyZeR6EcLYZ91ZMtpJifJ0tKNkxAe
+ac6BZiqMZ4/TenCwcwWCQta8axyE8Q==
+=5056
+-----END PGP SIGNATURE-----

Botan.changes

@@ -1,3 +1,72 @@
+-------------------------------------------------------------------
+Tue Jun 17 08:43:06 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to 3.8.1
+
+  * Discussion has started regarding plans for Botan4, current ETA 2027.
+  * Ongoing elliptic curve optimizations and cleanups
+  * Add support for SM4 instructions added in upcoming Intel processors
+  * Add support for extended private keys in ML-KEM to handle certain implementations which do not use the seed encoding.
+  * Add support for SHA-512 instructions added in upcoming Intel processors
+  * The SHA-1 implementation using SSE2 has been extended to support NEON and LoongArch LSX.
+  * The default TLS policy now prefers AES/GCM over ChaCha20Poly1305
+  * Add support for TLS 1.3 post-quantum KEM secp384r1/ML-KEM-1024
+
+For a full changelog, see: https://botan.randombit.net/news.html#version-3-8-1-2025-05-07 
+
+-------------------------------------------------------------------
+Wed Mar 12 09:02:29 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.7.1, latest stable release
+
+* Revert a change that prevented build.h from being usable from C applications. 
+* Add post-quantum scheme Classic McEliece 
+* In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers. 
+* Support for the pre-standard Kyber-r3 key exchange has been removed from TLS 
+* In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites. 
+* Add new EC key constructors 
+* Internal EC optimizations and improvements
+* Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
+* Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
+* TPM 2.0 improvements 
+* Fix a build issue when compiling with MSVC on ARM
+* Find full changelog at: https://botan.randombit.net/news.html 
+
+-------------------------------------------------------------------
+Tue Nov  5 08:16:35 UTC 2024 - Stephan Hemeier <Sauerlandlinux@gmx.de>
+
+- Botan 3.6.1, the latest stable release of the Botan 3 series 
+
+  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
+  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
+  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
+  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
+  * In speed command line utility, also iterate keygen several times. (GH #4381)
+
+-------------------------------------------------------------------
+Fri Oct 25 12:47:42 UTC 2024 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.6.0, the latest stable release of the Botan 3 series
+
+* Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
+* Add support for AVX2-VAES instructions
+* Add support for new ECC curves
+* Fix: CVE-2024-50382
+
+For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21
+
+-------------------------------------------------------------------
+Tue Jul 30 19:37:33 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Botan 3.5.0, the latest stable release of the Botan 3 series
+  * TLS 1.3 supported
+  * large header cleanup compared to v2
+  * start support of Post Quantum Crypto
+  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
+    CBC-MAC, Tiger, CECPQ1, and NewHope
+- The legacy Botan 2 series moved to Botan2 source package. It is
+  EOL at the end of 2024.
+
 -------------------------------------------------------------------
 Mon Jul 15 05:50:55 UTC 2024 - Angel Yankov <angel.yankov@suse.com>
 

Botan.spec

@@ -2,6 +2,7 @@
 # spec file for package Botan
 #
 # Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,11 +17,10 @@
 #
 
 
-%{!?make_build: %define make_build make %{?_smp_mflags}}
+%define version_suffix 3-8
-%define version_suffix 2-19
+%define short_version 3
-%define short_version 2
 Name:           Botan
-Version:        2.19.5
+Version:        3.8.1
 Release:        0
 Summary:        A C++ Crypto Library
 License:        BSD-2-Clause
@@ -31,7 +31,7 @@ Source1:        https://botan.randombit.net/releases/Botan-%{version}.tar.xz.asc
 Source2:        %{name}.keyring
 Source3:        baselibs.conf
 BuildRequires:  bzip2 >= 1.0.2
-BuildRequires:  gcc-c++
+BuildRequires:  c++_compiler
 BuildRequires:  libbz2-devel
 BuildRequires:  pkgconfig
 BuildRequires:  python3
@@ -39,6 +39,9 @@ BuildRequires:  trousers-devel
 BuildRequires:  zlib-devel
 BuildRequires:  pkgconfig(liblzma)
 BuildRequires:  pkgconfig(sqlite3)
+%if 0%{?suse_version} < 1600
+BuildRequires:  gcc12-c++
+%endif
 
 %description
 Botan is a C++ library that provides support for many common
@@ -89,11 +92,15 @@ BuildArch:      noarch
 Documentation of Botan package.
 
 %prep
-%setup -q -n Botan-%{version}
+%autosetup -n Botan-%{version}
 
 %build
 %define _lto_cflags %{nil}
 export RPM_OPT_FLAGS
+%if 0%{?suse_version} < 1600
+export CC=gcc-12
+export CXX=g++-12
+%endif
 python3 ./configure.py \
   --prefix=%{_prefix} \
   --bindir=%{_bindir} \
@@ -103,7 +110,6 @@ python3 ./configure.py \
   --with-bzip2 \
   --with-zlib \
   --with-lzma \
-  --with-openmp \
   --with-sqlite \
   --with-tpm \
 %ifarch %{ix86}
@@ -122,30 +128,36 @@ python3 ./configure.py \
 sed -i 's/env python/env python3/' src/scripts/install.py
 %make_install
 rm -f %{buildroot}/%{_libdir}/libbotan*.a
-chmod +x %{buildroot}%{python3_sitearch}/botan2.py
+chmod +x %{buildroot}%{python3_sitearch}/botan3.py
-sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan2.py
+sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan3.py
-
-rm %{buildroot}%{_bindir}/botan
 
 %check
 %make_build check
 
-%post -n libbotan-%{version_suffix} -p /sbin/ldconfig
+%ldconfig_scriptlets -n libbotan-%{version_suffix}
-%postun -n libbotan-%{version_suffix} -p /sbin/ldconfig
+
+%files
+%license license.txt
+%{_bindir}/botan
 
 %files doc
+%license license.txt
 %docdir %{botan_docdir}
 %{botan_docdir}
 
 %files -n libbotan-%{version_suffix}
+%license license.txt
 %{_libdir}/libbotan-%{short_version}.so.*
 
 %files -n libbotan-devel
+%license license.txt
 %{_libdir}/libbotan-%{short_version}.so
 %{_libdir}/pkgconfig/botan-%{short_version}.pc
 %{_includedir}/botan-%{short_version}
+%{_libdir}/cmake
 
 %files -n python3-botan
-%{python3_sitearch}/botan2.py
+%license license.txt
+%{python3_sitearch}/botan3.py
 
 %changelog

baselibs.conf

@@ -1,4 +1,4 @@
-libbotan-2-19
+libbotan-3-8
 libbotan-devel
 	requires -libbotan-<targettype> = <version>
-	requires "libbotan-2-19-<targettype> = <version>"
+	requires "libbotan-3-8-<targettype> = <version>"