Bump to Botan 3.9.0

In some rare conditions, Botan 3.6.0 has problems with Processors, see:
https://botan.randombit.net/news.html#version-3-6-1-2024-10-26

Botan-2.19.5.tar.xz.asc

@@ -1,12 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmaL/agACgkQYhHr8e+6
-37wGJggAnreZh5SxH/FQTgeLtLD+Fb11cnyBstQeWuJq0Np/bPSsEzwgMLu9F/0/
-DWOH74eDLds8FUhh/w39bOkNgd2r6FTBLjnN1g8M86jsTg7ILlG04tbc1GF79Mx8
-GxDBdfNsKmqKEzVJBWHbwnqjvOR9oO2bdKLe2NCJ9jyrw5xyHNhfOEG7zXzpfFFN
-DM16kl2OVYnYrbDQyVGW9JNi+038qyR3fBfkWInOd8WoiimrOTk5+HuBL06RhWGN
-yiHT9P5AK/45fhCcs0yFiUpfrz85MfqqT6vIygV7v2fDElfpTX12LB1I7id8QyDN
-m9gqpB0mP0ewxaO0sIuV0UXk+ntfDg==
-=IUJq
------END PGP SIGNATURE-----
-

Botan-3.9.0.tar.xz.asc

@@ -0,0 +1,12 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEYh2vZBHhhRxM+aLhYhHr8e+637wFAmiR/HIACgkQYhHr8e+6
+37wRmAf9EoqMLsOopra70taepZgw8g8qAZyMqz2Ovv9lvR/8yI8lMdODYyxxymA2
+saW9QBtiLEp/Y0RI3Sl7zUqdUlAhczZXiNKGfqDdmcG0Fdp8Suq8kam/C7XYB/VO
+f44+Gzxq46L8NftR0Rld3IgJm1eloq1zrOo4pMJbuCjVRu7wViu9ZNDTLpCUzN0M
+0Vqp9YfOJdFyBcz/V6zuS+1yFkeyFT2ZdAz654hikJZjzdu7vBDm0ssbTQGq0t7l
+Du9e+xwLukoCGEOvv1eTqR2ShHAG4QWCefxoStvf07mFC5x/D0GjeCKr0aV+v2F7
+QgTtWw5nuBDNcwdqB7G6/YraYkc5Ig==
+=utT7
+-----END PGP SIGNATURE-----
+

Botan.changes

@@ -1,3 +1,92 @@
+-------------------------------------------------------------------
+Fri Aug 22 07:30:18 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to Botan 3.9.0
+    
+  * Add SHA-1 implementation using AVX2/BMI2 (GH #4852)
+  * Add Camellia implementation using GFNI/AVX2 (GH #4848)
+  * Add SHACAL2 implementation using AVX512 (GH #4878)
+  * The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900)
+  * Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776)
+  * Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886)
+  * Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991)
+  * Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950)
+  * Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888)
+  * Optimizations for X448 and Ed448 (GH #5037)
+  * Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853)
+  * Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024)
+
+For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05
+
+-------------------------------------------------------------------
+Tue Jun 17 08:43:06 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Bump to 3.8.1
+
+  * Discussion has started regarding plans for Botan4, current ETA 2027.
+  * Ongoing elliptic curve optimizations and cleanups
+  * Add support for SM4 instructions added in upcoming Intel processors
+  * Add support for extended private keys in ML-KEM to handle certain implementations which do not use the seed encoding.
+  * Add support for SHA-512 instructions added in upcoming Intel processors
+  * The SHA-1 implementation using SSE2 has been extended to support NEON and LoongArch LSX.
+  * The default TLS policy now prefers AES/GCM over ChaCha20Poly1305
+  * Add support for TLS 1.3 post-quantum KEM secp384r1/ML-KEM-1024
+
+For a full changelog, see: https://botan.randombit.net/news.html#version-3-8-1-2025-05-07 
+
+-------------------------------------------------------------------
+Wed Mar 12 09:02:29 UTC 2025 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.7.1, latest stable release
+
+* Revert a change that prevented build.h from being usable from C applications. 
+* Add post-quantum scheme Classic McEliece 
+* In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers. 
+* Support for the pre-standard Kyber-r3 key exchange has been removed from TLS 
+* In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites. 
+* Add new EC key constructors 
+* Internal EC optimizations and improvements
+* Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
+* Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
+* TPM 2.0 improvements 
+* Fix a build issue when compiling with MSVC on ARM
+* Find full changelog at: https://botan.randombit.net/news.html 
+
+-------------------------------------------------------------------
+Tue Nov  5 08:16:35 UTC 2024 - Stephan Hemeier <Sauerlandlinux@gmx.de>
+
+- Botan 3.6.1, the latest stable release of the Botan 3 series 
+
+  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
+  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
+  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
+  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
+  * In speed command line utility, also iterate keygen several times. (GH #4381)
+
+-------------------------------------------------------------------
+Fri Oct 25 12:47:42 UTC 2024 - Angel Yankov <angel.yankov@suse.com>
+
+- Botan 3.6.0, the latest stable release of the Botan 3 series
+
+* Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
+* Add support for AVX2-VAES instructions
+* Add support for new ECC curves
+* Fix: CVE-2024-50382
+
+For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21
+
+-------------------------------------------------------------------
+Tue Jul 30 19:37:33 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Botan 3.5.0, the latest stable release of the Botan 3 series
+  * TLS 1.3 supported
+  * large header cleanup compared to v2
+  * start support of Post Quantum Crypto
+  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
+    CBC-MAC, Tiger, CECPQ1, and NewHope
+- The legacy Botan 2 series moved to Botan2 source package. It is
+  EOL at the end of 2024.
+
 -------------------------------------------------------------------
 Mon Jul 15 05:50:55 UTC 2024 - Angel Yankov <angel.yankov@suse.com>
 

Botan.spec

@@ -2,6 +2,7 @@
 # spec file for package Botan
 #
 # Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,11 +17,10 @@
 #
 
 
-%{!?make_build: %define make_build make %{?_smp_mflags}}
-%define version_suffix 2-19
-%define short_version 2
+%define version_suffix 3-9
+%define short_version 3
 Name:           Botan
-Version:        2.19.5
+Version:        3.9.0
 Release:        0
 Summary:        A C++ Crypto Library
 License:        BSD-2-Clause
@@ -31,7 +31,7 @@ Source1:        https://botan.randombit.net/releases/Botan-%{version}.tar.xz.asc
 Source2:        %{name}.keyring
 Source3:        baselibs.conf
 BuildRequires:  bzip2 >= 1.0.2
-BuildRequires:  gcc-c++
+BuildRequires:  c++_compiler
 BuildRequires:  libbz2-devel
 BuildRequires:  pkgconfig
 BuildRequires:  python3
@@ -39,6 +39,9 @@ BuildRequires:  trousers-devel
 BuildRequires:  zlib-devel
 BuildRequires:  pkgconfig(liblzma)
 BuildRequires:  pkgconfig(sqlite3)
+%if 0%{?suse_version} < 1600
+BuildRequires:  gcc12-c++
+%endif
 
 %description
 Botan is a C++ library that provides support for many common
@@ -89,11 +92,15 @@ BuildArch:      noarch
 Documentation of Botan package.
 
 %prep
-%setup -q -n Botan-%{version}
+%autosetup -n Botan-%{version}
 
 %build
 %define _lto_cflags %{nil}
 export RPM_OPT_FLAGS
+%if 0%{?suse_version} < 1600
+export CC=gcc-12
+export CXX=g++-12
+%endif
 python3 ./configure.py \
   --prefix=%{_prefix} \
   --bindir=%{_bindir} \
@@ -103,7 +110,6 @@ python3 ./configure.py \
   --with-bzip2 \
   --with-zlib \
   --with-lzma \
-  --with-openmp \
   --with-sqlite \
   --with-tpm \
 %ifarch %{ix86}
@@ -122,30 +128,36 @@ python3 ./configure.py \
 sed -i 's/env python/env python3/' src/scripts/install.py
 %make_install
 rm -f %{buildroot}/%{_libdir}/libbotan*.a
-chmod +x %{buildroot}%{python3_sitearch}/botan2.py
-sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan2.py
-
-rm %{buildroot}%{_bindir}/botan
+chmod +x %{buildroot}%{python3_sitearch}/botan3.py
+sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan3.py
 
 %check
 %make_build check
 
-%post -n libbotan-%{version_suffix} -p /sbin/ldconfig
-%postun -n libbotan-%{version_suffix} -p /sbin/ldconfig
+%ldconfig_scriptlets -n libbotan-%{version_suffix}
+
+%files
+%license license.txt
+%{_bindir}/botan
 
 %files doc
+%license license.txt
 %docdir %{botan_docdir}
 %{botan_docdir}
 
 %files -n libbotan-%{version_suffix}
+%license license.txt
 %{_libdir}/libbotan-%{short_version}.so.*
 
 %files -n libbotan-devel
+%license license.txt
 %{_libdir}/libbotan-%{short_version}.so
 %{_libdir}/pkgconfig/botan-%{short_version}.pc
 %{_includedir}/botan-%{short_version}
+%{_libdir}/cmake
 
 %files -n python3-botan
-%{python3_sitearch}/botan2.py
+%license license.txt
+%{python3_sitearch}/botan3.py
 
 %changelog

baselibs.conf

@@ -1,4 +1,4 @@
-libbotan-2-19
+libbotan-3-9
 libbotan-devel
 	requires -libbotan-<targettype> = <version>
-	requires "libbotan-2-19-<targettype> = <version>"
+	requires "libbotan-3-9-<targettype> = <version>"