From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH 1/3] libsodium: Update to version 1.0.19 Date: Wed, 08 Nov 2023 22:58:04 +0100 Message-ID: <20231108215809.2617157-8-adolf.belka@ipfire.org> In-Reply-To: <20231108215809.2617157-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0540263708915271687==" List-Id: --===============0540263708915271687== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from version 1.0.18 to 1.0.19 - Update of rootfile - sobump so find-dependencies run. Identified dnsdist and shairport-sync to b= e shipped. - Changelog 1.0.19 - New AEADs: AEGIS-128L and AEGIS-256 are now available in the `crypto_aead_aegis128l_*()` and `crypto_aead_aegis256_*()` namespaces. AEGIS is a family of authenticated ciphers for high-performance applicati= ons, leveraging hardware AES acceleration on `x86_64` and `aarch64`. In additi= on to performance, AEGIS ciphers have unique properties making them easier a= nd safer to use than AES-GCM. They can also be used as high-performance MACs. - The HKDF key derivation mechanism, required by many standard protocols, is now available in the `crypto_kdf_hkdf_*()` namespace. It is implemented f= or the SHA-256 and SHA-512 hash functions. - The `osx.sh` build script was renamed to `macos.sh`. - Support for android-mips was removed. 1.0.18-stable - Visual Studio: support for Windows/ARM64 builds has been added. - Visual Studio: AVX512 implementations are enabled on supported CPUs. - Visual Studio: an MSVC 2022 solution was added. - Apple XCFramework: support for VisionOS was added. - Apple XCFranework: support for Catalyst was added. - Apple XCFramework: building the simulators is now optional. - iOS: bitcode is not generated any more, as it was deprecated by Apple. - watchOS: support for arm64 was added. - The Zig toolchain can now be used as a modern build system to replace autoconf/automake/libtool/make/ccache and the compiler. This enables fast= er compilation times, easier cross compilation, and static libraries optimiz= ed for any CPU. - The Zig toolchain is now the recommended way to compile `libsodium` to WebAssembly/WASI(X). - libsodium can now be added as a dependency to Zig projects. - Memory fences were added to remove some gadgets that could be used alongside speculative loads. - The AES-GCM implementation was completely rewritten. It is now faster, and also available on aarch64, including Windows/ARM64. - Compatibility with CET instrumentation / IBT / Shadow Stack was added. - Emscripten: the `crypto_pwhash_*()` functions have been removed from Sumo builds, as they reserve a substantial amount of JavaScript memory, even w= hen not used. - Benchmarks now use `CLOCK_MONOTONIC` if possible. - WebAssembly: tests can now run using Bun, WasmEdge, Wazero, wasm3 and wasmer-js. Support for WAVM and Lucet have been removed, as these projects have reached EOL. - .NET: the minimum supported macOS version is now 1.0.15; this matches Microsoft guidelines. - .NET: all the packages are now built using Zig, on all platforms. This allows us to easily match Microsoft's requirements, including supported g= libc versions. However, on x86_64, targets are expected to support at least the AVX instruction set. - .NET: packages for ARM64 are now available. - C23 `memset_explicit()` is now used, when available. - Compilation now uses `-Ofast` or `-O3` instead of `-O2` by default. - Portability improvements to help compile libsodium to modern game console= s. - JavaScript: a default `unhandledRejection` handler is not set any more. - Slightly faster 25519 operations. - OpenBSD: leverage `MAP_CONCEAL`. Signed-off-by: Adolf Belka --- config/rootfiles/common/libsodium | 8 ++++++-- lfs/libsodium | 8 ++++---- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/common/libsodium b/config/rootfiles/common/libs= odium index 741f99405..7abf85a7e 100644 --- a/config/rootfiles/common/libsodium +++ b/config/rootfiles/common/libsodium @@ -1,6 +1,8 @@ #usr/include/sodium #usr/include/sodium.h #usr/include/sodium/core.h +#usr/include/sodium/crypto_aead_aegis128l.h +#usr/include/sodium/crypto_aead_aegis256.h #usr/include/sodium/crypto_aead_aes256gcm.h #usr/include/sodium/crypto_aead_chacha20poly1305.h #usr/include/sodium/crypto_aead_xchacha20poly1305.h @@ -25,6 +27,8 @@ #usr/include/sodium/crypto_hash_sha512.h #usr/include/sodium/crypto_kdf.h #usr/include/sodium/crypto_kdf_blake2b.h +#usr/include/sodium/crypto_kdf_hkdf_sha256.h +#usr/include/sodium/crypto_kdf_hkdf_sha512.h #usr/include/sodium/crypto_kx.h #usr/include/sodium/crypto_onetimeauth.h #usr/include/sodium/crypto_onetimeauth_poly1305.h @@ -64,6 +68,6 @@ #usr/include/sodium/version.h #usr/lib/libsodium.la #usr/lib/libsodium.so -usr/lib/libsodium.so.23 -usr/lib/libsodium.so.23.3.0 +usr/lib/libsodium.so.26 +usr/lib/libsodium.so.26.1.0 #usr/lib/pkgconfig/libsodium.pc diff --git a/lfs/libsodium b/lfs/libsodium index 75c3aaf63..892118a8e 100644 --- a/lfs/libsodium +++ b/lfs/libsodium @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2019 IPFire Team = # +# Copyright (C) 2007-2023 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -24,12 +24,12 @@ =20 include Config =20 -VER =3D 1.0.18 +VER =3D 1.0.19 =20 THISAPP =3D libsodium-$(VER) DL_FILE =3D $(THISAPP).tar.gz DL_FROM =3D $(URL_IPFIRE) -DIR_APP =3D $(DIR_SRC)/$(THISAPP) +DIR_APP =3D $(DIR_SRC)/libsodium-stable TARGET =3D $(DIR_INFO)/$(THISAPP) =20 ############################################################################= ### @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D a42d898fe77f232dcbb75728e776b88f006e89f734c4d335e75e01= d37b1034cc024df2e89d4350ecbe713d3e4b32c08bec537922c81cc63b0e87ee7fd89b2940 +$(DL_FILE)_BLAKE2 =3D de43520150b55760142d186404cc3e49471c6e911a7a590c7ae08b= c61e928c063c459555f49cd88155238fb0008ef3924b6d7c14ba9cff2f90f1e96201e1259c =20 install : $(TARGET) =20 --=20 2.42.1 --===============0540263708915271687==--