Accepting request 988627 from security:tls

- update to 3.8:
  This release includes a couple of new features, and many
  performance improvements. It adds assembly code for two more
  architectures: ARM64 and S390x.
  The new version is intended to be fully source and binary
  compatible with Nettle-3.6. The shared library names are
  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
  libnettle.so.8 and libhogweed.so.6.
  New features:
  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
  * SM3 hash function, contributed by Tianjia Zhang.
  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
    cbc_aes256_encrypt.
    On processors where AES is fast enough, e.g., x86_64 with
    aesni instructions, the overhead of using Nettle's general
    cbc_encrypt can be significant. The new functions can be
    implemented in assembly, to do multiple blocks with reduced
    per-block overhead.
    Note that there's no corresponding new decrypt functions,
    since the general cbc_decrypt doesn't suffer from the same
    performance problem.
  Bug fixes:
  * Fix fat builds for x86_64 windows, these appear to never
    have worked.
  Optimizations:
  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
    SHA256, for processors supporting crypto extensions. Great
    speedups, and fat builds are supported. Contributed by
    Mamone Tarsha.
  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,

OBS-URL: https://build.opensuse.org/request/show/988627
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libnettle?expand=0&rev=42

libnettle.changes

@@ -1,3 +1,65 @@
+-------------------------------------------------------------------
+Mon Jul 11 19:22:12 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.8:
+  This release includes a couple of new features, and many
+  performance improvements. It adds assembly code for two more
+  architectures: ARM64 and S390x.
+
+  The new version is intended to be fully source and binary
+  compatible with Nettle-3.6. The shared library names are
+  libnettle.so.8.5 and libhogweed.so.6.5, with sonames
+  libnettle.so.8 and libhogweed.so.6.
+
+  New features:
+
+  * AES keywrap (RFC 3394), contributed by Nicolas Mora.
+
+  * SM3 hash function, contributed by Tianjia Zhang.
+
+  * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
+    cbc_aes256_encrypt.
+
+    On processors where AES is fast enough, e.g., x86_64 with
+    aesni instructions, the overhead of using Nettle's general
+    cbc_encrypt can be significant. The new functions can be
+    implemented in assembly, to do multiple blocks with reduced
+    per-block overhead.
+
+    Note that there's no corresponding new decrypt functions,
+    since the general cbc_decrypt doesn't suffer from the same
+    performance problem.
+
+  Bug fixes:
+
+  * Fix fat builds for x86_64 windows, these appear to never
+    have worked.
+
+  Optimizations:
+
+  * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
+    SHA256, for processors supporting crypto extensions. Great
+    speedups, and fat builds are supported. Contributed by
+    Mamone Tarsha.
+
+  * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
+    SHA256, SHA512 and SHA3. Great speedups, and fat builds are
+    supported. Contributed by Mamone Tarsha.
+
+  * New PPC64 assembly for ecc modulo/redc operations,
+    contributed by Amitay Isaacs, Martin Schwenke and Alastair
+    D´Silva.
+
+  * The x86_64 AES implementation using aesni instructions has
+    been reorganized with one separate function per key size,
+    each interleaving the processing of two blocks at a time
+    (when the caller processes multiple blocks with each call).
+    This gives a modest performance improvement on some
+    processors.
+
+  * Rewritten and faster x86_64 poly1305 assembly.
+- drop libnettle-s390x-CPACF-SHA-AES-support.patch (included in 3.8) 
+
 -------------------------------------------------------------------
 Wed Jun 15 14:08:02 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
 

libnettle.spec

@@ -19,7 +19,7 @@
 %define soname 8
 %define hogweed_soname 6
 Name:           libnettle
-Version:        3.7.3
+Version:        3.8
 Release:        0
 Summary:        Cryptographic Library
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
@@ -30,8 +30,6 @@ Source1:        https://ftp.gnu.org/gnu/nettle/nettle-%{version}.tar.gz.sig
 Source2:        %{name}.keyring
 Source3:        baselibs.conf
 Source4:        %{name}-rpmlintrc
-#PATCH-FIX-UPSTREAM Provide s390x CPACF/SHA/AES Support for Crypto Libraries [jsc#SLE-20733]
-Patch0:         libnettle-s390x-CPACF-SHA-AES-support.patch
 BuildRequires:  autoconf
 BuildRequires:  fipscheck
 BuildRequires:  gmp-devel >= 6.1.0

nettle-3.7.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:661f5eb03f048a3b924c3a8ad2515d4068e40f67e774e8a26827658007e3bcf0
-size 2383985

nettle-3.8.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7576c68481c198f644b08c160d1a4850ba9449e308069455b5213319f234e8e6
+size 2404258