Accepting request 1087283 from home:AndreasStieger:branches:security:tls

libnettle 3.9

OBS-URL: https://build.opensuse.org/request/show/1087283
OBS-URL: https://build.opensuse.org/package/show/security:tls/libnettle?expand=0&rev=33

libnettle.changes

@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Mon May 15 19:20:37 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 3.9
+  * rewrite of the C and plain x86_64 assembly implementations of
+    GHASH to use precomputed tables in a different way, with tables
+    always accessed in the same sequential manner. This should make
+    Nettle's GHASH implementation side-channel silent on all
+    platforms, but considerably slower on platforms without carry-
+    less mul instructions. E.g., benchmarks of the C implementation
+    on x86_64 showed a slowdown of 3 times.
+  * Fix bug in ecdsa and gostdsa signature verify operation, for
+    the unlikely corner case that point addition really is point
+    duplication.
+  * Fix for chacha on Power7, nettle's assembly used an instruction
+    only available on later processors
+  * Add support for the SM4 block cipher
+  * Add support for the Balloon password hash
+  * Add support for SIV-GCM authenticated encryption mode
+  * Add support for OCB authenticated encryption mode.
+  * New exported functions md5_compress, sha1_compress,
+    sha256_compress, sha512_compress
+  * multiple performance optimizations
+  * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit
+    and 64-bit sparc
+
 -------------------------------------------------------------------
 Wed Mar  8 10:32:20 UTC 2023 - Martin Pluskal <mpluskal@suse.com>
 

libnettle.spec

@@ -19,7 +19,7 @@
 %define soname 8
 %define hogweed_soname 6
 Name:           libnettle
-Version:        3.8.1
+Version:        3.9
 Release:        0
 Summary:        Cryptographic Library
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later

nettle-3.8.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:364f3e2b77cd7dcde83fd7c45219c834e54b0c75e428b6f894a23d12dd41cbfe
-size 2406251

nettle-3.9.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0ee7adf5a7201610bb7fe0acbb7c9b3be83be44904dd35ebbcd965cd896bfeaa
+size 2393838