testing/libgcrypt
SHA256
7
0
Fork 0
forked from pool/libgcrypt
Code Pull Requests Activity

Factory #1

Merged
dgarcia merged 15 commits from factory into main 2025-10-08 12:56:26 +02:00
Conversation 0 Commits 15 Files Changed 14 +2264 -180
dgarcia commented 2025-10-06 14:27:33 +02:00
Owner
Copy Link
No description provided.
dgarcia added 15 commits 2025-10-06 14:27:33 +02:00
- Remove unrecognized option: --enable-m-guard a86dd9c96a 
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=182
Accepting request 1229393 from devel:libraries:c_c++ 3fa142f949 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1229393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=104
- Fix redefinition error of 'rol64'. Remove not used rol64() b52a99835f 
definition after removing the built-in jitter rng.
  * Add libgcrypt-rol64-redefinition.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=184
Accepting request 1235881 from devel:libraries:c_c++ 8a5ce89984 
OBS-URL: https://build.opensuse.org/request/show/1235881
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=105
- Differentiate use of SHA1 in the service level indicator [jsc#PED-12227] 63766c912b 
* Include upstream SLI revamp and fips certification fixes
  * Add patches:
    - libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
    - libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
    - libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
    - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch
    - libgcrypt-fips-tests-Add-t-digest.patch
    - libgcrypt-fips-Change-the-internal-API-for-new-FIPS-service-indicator.patch
    - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_open-API.patch
    - libgcrypt-fips-tests-Add-tests-for-md_open-write-read-close-for-t-digest.patch
    - libgcrypt-fips-mac-Implement-new-FIPS-service-indicator-for-gcry_mac_open.patch
    - libgcrypt-fips-cipher-Implement-new-FIPS-service-indicator-for-cipher_open.patch
    - libgcrypt-tests-fips-Add-gcry_mac_open-tests.patch
    - libgcrypt-tests-fips-Rename-t-fips-service-ind.patch
    - libgcrypt-tests-fips-Move-KDF-tests-to-t-fips-service-ind.patch
    - libgcrypt-tests-fips-Add-gcry_cipher_open-tests.patch
    - libgcrypt-fips-md-gcry_md_copy-should-care-about-FIPS-service-indicator.patch
    - libgcrypt-fips-cipher-Implement-FIPS-service-indicator-for-gcry_pk_hash_-API.patch
    - libgcrypt-fips-Introduce-GCRYCTL_FIPS_REJECT_NON_FIPS.patch
    - libgcrypt-Fix-the-previous-change.patch
    - libgcrypt-fips-Rejection-by-GCRYCTL_FIPS_REJECT_NON_FIPS-not-by-open-flags.patch
    - libgcrypt-fips-cipher-Add-behavior-not-to-reject-but-mark-non-compliant.patch
    - libgcrypt-fips-ecc-Add-rejecting-or-marking-for-gcry_pk_get_curve.patch
    - libgcrypt-tests-Add-more-tests-to-tests-t-fips-service-ind.patch
    - libgcrypt-fips-ecc-Check-DATA-in-gcry_pk_sign-verify-in-FIPS-mode.patch
    - libgcrypt-fips-cipher-Fix-memory-leak-for-gcry_pk_hash_sign.patch
    - libgcrypt-build-Improve-__thread-specifier-check.patch
    - libgcrypt-cipher-Check-and-mark-non-compliant-cipher-modes-in-the-SLI.patch
    - libgcrypt-cipher-Rename-_gcry_cipher_is_mode_fips_compliant.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=186
Accepting request 1270020 from devel:libraries:c_c++ d11b50670d 
OBS-URL: https://build.opensuse.org/request/show/1270020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=106
- CSHAKE basic regression test failure in s390x [bsc#1242419 06032641d5 
* Disable SHA3 s390x acceleration for CSHAKE [rC2486d9b5ae01]
  * Add libgcrypt-Disable-SHA3-s390x-acceleration-for-CSHAKE.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=188
Accepting request 1274800 from devel:libraries:c_c++ e6a85218c1 
OBS-URL: https://build.opensuse.org/request/show/1274800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=107
- Update to 1.11.1: [jsc#PED-12227] f7ff22f6aa 
* Bug fixes:
    - Fix Kyber secret-dependent branch introduced by recent versions of Clang. [rCf765778e82]
    - Fix build regression due to the use of AVX512 in Blake. [T7184]
    - Do not build i386 asm on amd64 and vice versa. [T7220]
    - Fix build regression on armhf with gcc-14. [T7226]
    - Return the proper error code on malloc failure in hex2buffer. [rCc51151f5b0]
    - Fix long standing bug for PRIME % 2 == 0. [rC639b0fca15]
  * Performance:
    - Add AES Vector Permute intrinsics implementation for AArch64. [rC94a63aedbb]
    - Add GHASH AArch64/SIMD intrinsics implementation. [rCfec871fd18]
    - Add RISC-V vector permute AES. [rCb24ebd6163]
    - Add GHASH RISC-V Zbb+Zbc implementation. [rC0f1fec12b0]
    - Add ChaCha20 RISC-V vector intrinsics implementation. [rC8dbee93ac2]
    - Add SHA3 acceleration for RISC-V Zbb extension. [rC1a660068ba]
   * Other:
    - Add CET support for i386 and amd64 assembly. [T7220]
    - Add PAC/BTI support for AArch64 asm. [T7220]
    - Apply changes to Kyber from upstream for final FIPS 203. [rCcc95c36e7f]
    - Introduce an internal API for a revampled FIPS service indicator. [T7340]
    - Several improvements for constant time operation by the introduction of Least Leak Intended (LLI) variants of internal functions. [T7519,T7490]
  * Rebase patches:
    - libgcrypt-FIPS-SLI-hash-mac.patch
    - libgcrypt-FIPS-SLI-pk.patch
    - libgcrypt-FIPS-jitter-standalone.patch
  * Remove patches:
    - libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
    - libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
    - libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
    - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=190
* Other: 4fc6367f29 
- Several improvements for constant time operation by the introduction of
      Least Leak Intended (LLI) variants of internal functions. [T7519,T7490]
  * Add libgcrypt-1.11.1-public-SLI-API.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=191
Accepting request 1276114 from devel:libraries:c_c++ c98b0cc12c 
OBS-URL: https://build.opensuse.org/request/show/1276114
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=108
- Security fix [bsc#1221107, CVE-2024-2236] b5b243be7f 
* Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack ) 
  * Add libgcrypt-CVE-2024-2236.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=193
Accepting request 1284327 from devel:libraries:c_c++ da78dd7469 
OBS-URL: https://build.opensuse.org/request/show/1284327
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=109
libgcrypt 1.11.2 c4e721bdfb 
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=195
Accepting request 1299109 from devel:libraries:c_c++ 250026d56d 
libgcrypt 1.11.2 (forwarded request 1298440 from AndreasStieger)

OBS-URL: https://build.opensuse.org/request/show/1299109
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgcrypt?expand=0&rev=110
dgarcia merged commit 2664e051c8 into main 2025-10-08 12:56:26 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm adrianSuSE autogits-devel dgarcia dirkmueller gitea_test yudaike
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: testing/libgcrypt#1
Delete Branch "factory"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?