Accepting request 1301227 from devel:libraries:c_c++

* Add SHA-1 implementation using AVX2/BMI2 (GH #4852)
  * Add Camellia implementation using GFNI/AVX2 (GH #4848)
  * Add SHACAL2 implementation using AVX512 (GH #4878)
  * The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900)
  * Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776)
  * Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886)
  * Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991)
  * Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950)
  * Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888)
  * Optimizations for X448 and Ed448 (GH #5037)
  * Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853)
  * Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024)
For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05

OBS-URL: https://build.opensuse.org/request/show/1301227
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/Botan?expand=0&rev=71

Botan-3.5.0.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmaL+2IACgkQYhHr8e+6
-37zf+wf/U9GF3tguONnO/jcUeolt79VImmvda0nnMSeHkP67mpSFj+dAHZ9ZZHKL
-2/TlzLHasb0hqZkmM08LtN4kUm8U6EZcfFV8c7Z3gcLIApepDejLk1Ya4/171GiV
-tljiNpQOuX4GoaPkMO8QKBmbTSqXcaedu+CDp8LPiP3+t8cTSXm/rSZ8zJge+QO1
-0BemGyGnE2SftJfQOCEQtmt0m04g3efekv1xzMHQAzsorfXkqCYslCuOmmlcbObX
-X/Bwr6yulwtzS5ON5YPZ33xQpISwBtwDEJcmPKDIGOoPecOxdc3qxL2qWPo5c3zs
-YScRQOJLiDByh6iVINYHCuGpbdxrxw==
-=nyD1
------END PGP SIGNATURE-----

Botan-3.9.0.tar.xz.asc

@@ -0,0 +1,12 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmiR/HIACgkQYhHr8e+6
+37wRmAf9EoqMLsOopra70taepZgw8g8qAZyMqz2Ovv9lvR/8yI8lMdODYyxxymA2
+saW9QBtiLEp/Y0RI3Sl7zUqdUlAhczZXiNKGfqDdmcG0Fdp8Suq8kam/C7XYB/VO
+f44+Gzxq46L8NftR0Rld3IgJm1eloq1zrOo4pMJbuCjVRu7wViu9ZNDTLpCUzN0M
+0Vqp9YfOJdFyBcz/V6zuS+1yFkeyFT2ZdAz654hikJZjzdu7vBDm0ssbTQGq0t7l
+Du9e+xwLukoCGEOvv1eTqR2ShHAG4QWCefxoStvf07mFC5x/D0GjeCKr0aV+v2F7
+QgTtWw5nuBDNcwdqB7G6/YraYkc5Ig==
+=utT7
+-----END PGP SIGNATURE-----
+

Botan.changes

@@ -1,3 +1,80 @@
+-------------------------------------------------------------------
+Fri Aug 22 07:30:18 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to Botan 3.9.0
+    
+  * Add SHA-1 implementation using AVX2/BMI2 (GH #4852)
+  * Add Camellia implementation using GFNI/AVX2 (GH #4848)
+  * Add SHACAL2 implementation using AVX512 (GH #4878)
+  * The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900)
+  * Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776)
+  * Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886)
+  * Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991)
+  * Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950)
+  * Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888)
+  * Optimizations for X448 and Ed448 (GH #5037)
+  * Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853)
+  * Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024)
+
+For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05
+
+-------------------------------------------------------------------
+Tue Jun 17 08:43:06 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to 3.8.1
+
+  * Discussion has started regarding plans for Botan4, current ETA 2027.
+  * Ongoing elliptic curve optimizations and cleanups
+  * Add support for SM4 instructions added in upcoming Intel processors
+  * Add support for extended private keys in ML-KEM to handle certain implementations which do not use the seed encoding.
+  * Add support for SHA-512 instructions added in upcoming Intel processors
+  * The SHA-1 implementation using SSE2 has been extended to support NEON and LoongArch LSX.
+  * The default TLS policy now prefers AES/GCM over ChaCha20Poly1305
+  * Add support for TLS 1.3 post-quantum KEM secp384r1/ML-KEM-1024
+
+For a full changelog, see: https://botan.randombit.net/news.html#version-3-8-1-2025-05-07 
+
+-------------------------------------------------------------------
+Wed Mar 12 09:02:29 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.7.1, latest stable release
+
+* Revert a change that prevented build.h from being usable from C applications. 
+* Add post-quantum scheme Classic McEliece 
+* In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers. 
+* Support for the pre-standard Kyber-r3 key exchange has been removed from TLS 
+* In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites. 
+* Add new EC key constructors 
+* Internal EC optimizations and improvements
+* Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
+* Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
+* TPM 2.0 improvements 
+* Fix a build issue when compiling with MSVC on ARM
+* Find full changelog at: https://botan.randombit.net/news.html 
+
+-------------------------------------------------------------------
+Tue Nov  5 08:16:35 UTC 2024 - Stephan Hemeier <Sauerlandlinux@gmx.de>
+
+- Botan 3.6.1, the latest stable release of the Botan 3 series 
+
+  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
+  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
+  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
+  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
+  * In speed command line utility, also iterate keygen several times. (GH #4381)
+
+-------------------------------------------------------------------
+Fri Oct 25 12:47:42 UTC 2024 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.6.0, the latest stable release of the Botan 3 series
+
+* Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
+* Add support for AVX2-VAES instructions
+* Add support for new ECC curves
+* Fix: CVE-2024-50382
+
+For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21
+
 -------------------------------------------------------------------
 Tue Jul 30 19:37:33 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
 

Botan.spec

@@ -17,10 +17,10 @@
 #
 
 
-%define version_suffix 3-5
+%define version_suffix 3-9
 %define short_version 3
 Name:           Botan
-Version:        3.5.0
+Version:        3.9.0
 Release:        0
 Summary:        A C++ Crypto Library
 License:        BSD-2-Clause

_scmsync.obsinfo

@@ -1,4 +1,4 @@
-mtime: 1722500874
-commit: 13cdc02dbff51e0e0abe5b1c4ab1e2156cbace09b4cbae9d8b8de25876ddd658
+mtime: 1755851614
+commit: 1172a41f24bf0cec21159f3696a33ae26dc43839ccb0430127c9dc02742e2dd6
 url: https://src.opensuse.org/ayankov/Botan.git
-revision: 13cdc02dbff51e0e0abe5b1c4ab1e2156cbace09b4cbae9d8b8de25876ddd658
+revision: factory

baselibs.conf

@@ -1,4 +1,4 @@
-libbotan-3-5
+libbotan-3-9
 libbotan-devel
 	requires -libbotan-<targettype> = <version>
-	requires "libbotan-3-5-<targettype> = <version>"
+	requires "libbotan-3-9-<targettype> = <version>"