------------------------------------------------------------------- Sun Aug 11 12:48:14 UTC 2019 - Dave Plater - Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce length; and (2) leak in prime fields (ECP class). - See boo#1145187 - Disabled LTO for i586 to fix build failure. ------------------------------------------------------------------- Sat Jul 20 09:34:46 UTC 2019 - Dave Plater - Update to major version 8.2.0 - Filter out -flto= flag for arm7 see cryptopp issue#865 - Remove 0001-disable_os_rng_test.patch which is no longer needed. - Rebase libcryptopp-shared.patch - Added patchs from git which is indicated in cryptopp issue#865: 0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch and 0001-Fix-missing-if-statement.patch. Upstream changes since 7.0.0: *use PowerPC unaligned loads and stores with Power8 *add SKIPJACK test vectors *fix SHAKE-128 and SHAKE-256 compile *removed IS_NEON from Makefile *fix Aarch64 build on Fedora 29 *fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL *add missing BLAKE2 constructors *fix missing BlockSize() in BLAKE2 classes *add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE *add carryless multiplies for NIST b233 and k233 curves *fix OpenMP build due to use of OpenMP 4 with down-level compilers *add SignStream and VerifyStream for ed25519 and large files *fix missing AlgorithmProvider in PanamaHash *add SHAKE-128 and SHAKE-256 *fix AVX2 build due to _mm256_broadcastsi128_si256 *add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305 *add x25519 key exchange and ed25519 signature scheme *add limited Asymmetric Key Package support from RFC 5958 *add Power9 DARN random number generator support *add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck *fix FixedSizeAllocatorWithCleanup may be unaligned on some platforms *cutover to GNU Make-based cpu feature tests *rename files with dashes to underscores *fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC *avoid Singleton when possible, avoid std::call_once completely *fix SPARC alignment problems due to GetAlignmentOf() on word64 *add ARM AES asm implementation from Cryptogams *remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support ------------------------------------------------------------------- Sat Nov 17 14:27:33 UTC 2018 - Adam Mizerski - update to v7.0.0 * changelog available at https://cryptopp.com/release700.html and in packaged Readme.txt - Refreshed patches * 0001-disable_os_rng_test.patch * libcryptopp-shared.patch - Dropped patch reproducible.patch - merged upstream ------------------------------------------------------------------- Sat May 20 19:45:06 UTC 2017 - bwiedemann@suse.com - Add reproducible.patch to sort input files to make build fully reproducible ------------------------------------------------------------------- Fri Mar 3 05:58:37 UTC 2017 - davejplater@gmail.com - Added patch field to soname due to library not following proper API/ABI versioning to fix boo#1027192. - Removed crypto.pc and generate it in the spec file to ensure proper version and directories. - Changed libcryptopp-shared.patch. - Renamed library package and obsoleted old name. - added precheckin_baselibs.sh and updated baselibs.conf ------------------------------------------------------------------- Thu Feb 23 23:16:02 UTC 2017 - adam@mizerski.pl - update to 5.6.5 * Rebase libcryptopp-shared.patch * Rebase 0001-disable_os_rng_test.patch - enable openmp usage ------------------------------------------------------------------- Thu Feb 2 02:03:34 UTC 2017 - jengelh@inai.de - Add obsoletes tag for dropped static lib ------------------------------------------------------------------- Sat Jan 28 20:58:04 UTC 2017 - jengelh@inai.de - Remove libcryptoo-devel-static, this seems unused in Factory. ------------------------------------------------------------------- Sat Jan 28 09:32:22 UTC 2017 - jengelh@inai.de - Update descriptions ------------------------------------------------------------------- Mon Sep 12 08:50:44 UTC 2016 - bwiedemann@suse.com - Update to 5.6.4 * Use proper openSUSE-style library naming * Drop upstream libcryptopp-s390.patch * Drop upstream libcryptopp-m68k.patch * Drop upstream libcryptopp-CVE-2015-2141.patch * Drop upstream cryptopp-gcc6.patch * Rebase libcryptopp-shared.patch * Rebase 0001-disable_os_rng_test.patch ------------------------------------------------------------------- Mon Jun 20 11:09:05 UTC 2016 - i@marguerite.su - add patch cryptopp-gcc6.patch * fix boo#985143 * fix narrowing conversion from unsigned int to int inside {} ------------------------------------------------------------------- Wed Jul 8 08:01:11 UTC 2015 - bwiedemann@suse.com - prevent timing attack to get secret key (bnc#936435, CVE-2015-2141) add libcryptopp-CVE-2015-2141.patch ------------------------------------------------------------------- Fri Aug 15 01:39:59 UTC 2014 - sfalken@opensuse.org - Added 0001-disable_os_rng_test.patch Fixes buildfailure on openSUSE_Factory x86_64 within OBS environment, due to OS supplied Random Number Generator taking too long to respond ------------------------------------------------------------------- Thu Apr 3 13:21:06 UTC 2014 - schwab@suse.de - libcryptopp-m68k.patch: define IS_LITTLE_ENDIAN on m68k ------------------------------------------------------------------- Wed Dec 18 02:40:17 CET 2013 - ro@suse.de - define as big endian on s390/s390x (libcryptopp-s390.patch) ------------------------------------------------------------------- Wed Aug 28 08:29:36 UTC 2013 - dmueller@suse.com - remove noninstallable 32bit -devel baselibs ------------------------------------------------------------------- Fri Mar 1 17:02:43 UTC 2013 - adam@mizerski.pl - update to 5.6.2 - changed license to Boost Software License 1.0 - added SHA-3 (Keccak) - updated DSA to FIPS 186-3 (see DSA2 class) - fixed Blowfish minimum keylength to be 4 bytes (32 bits) - fixed Salsa validation failure when compiling with GCC 4.6 - fixed infinite recursion when on x64, assembly disabled, and no AESNI - ported to MSVC 2012, GCC 4.7, Clang 3.2, Solaris Studio 12.3, Intel C++ Compiler 13.0 - removed libcryptopp-gcc47.patch - fixed upstream - rebased libcryptopp-shared.patch - added devel-static subpackage - updated license tag ------------------------------------------------------------------- Sun Oct 14 10:58:07 UTC 2012 - adam@mizerski.pl - added baselibs.conf - spec file improved ------------------------------------------------------------------- Sat Mar 17 14:25:26 UTC 2012 - dimstar@opensuse.org - Add libcryptopp-gcc47.patch: Fix build with gcc 4.7. ------------------------------------------------------------------- Sun Feb 5 16:39:49 UTC 2012 - jengelh@medozas.de - Proper shared library versioning ------------------------------------------------------------------- Mon Oct 17 14:33:16 UTC 2011 - jengelh@medozas.de - Remove bogus Conflict against libcrypto++0 (cf. shlib guidelines) ------------------------------------------------------------------- Sat Oct 14 13:37:59 UTC 2011 - toddrme2178@gmail.com - Added pkg-config file from fedora project - Cleaned up spec file formatting ------------------------------------------------------------------- Sun Jul 10 23:43:05 CEST 2011 - meissner@suse.de - add -lpthread for tests ------------------------------------------------------------------- Thu Dec 16 14:40:17 UTC 2010 - andreas.hanke@gmx-topmail.de - Update to version 5.6.1: - added support for AES-NI and CLMUL instruction sets in AES and GMAC/GCM - removed WAKE-CFB - fixed several bugs in the SHA-256 x86/x64 assembly code: * incorrect hash on non-SSE2 x86 machines on non-aligned input * incorrect hash on x86 machines when input crosses 0x80000000 * incorrect hash on x64 when compiled with GCC with optimizations enabled - fixed bugs in AES x86 and x64 assembly causing crashes in some MSVC build configurations - switched to a public domain implementation of MARS - ported to MSVC 2010, GCC 4.5.1, Sun Studio 12u1, C++Builder 2010, Intel C++ Compiler 11.1 - renamed the MSVC DLL project to "cryptopp" for compatibility with MSVC 2010 - Changes to library packaging: - update the interface number because there were ABI changes, now matching the Debian package - introduce a conflict with the PackMan package - ship License.txt and Readme.txt - drop the static library ------------------------------------------------------------------- Mon Aug 9 22:29:54 UTC 2010 - pascal.bleser@opensuse.org - initial package (5.6.0)