From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] libgcrypt: Update to version 1.12.0
Date: Sat, 14 Feb 2026 16:20:32 +0100 [thread overview]
Message-ID: <20260214152040.3720549-12-adolf.belka@ipfire.org> (raw)
In-Reply-To: <20260214152040.3720549-1-adolf.belka@ipfire.org>
- Update from version 1.11.2 to 1.12.0
- Update of rootfile
- Changelog
1.12.0
* New and extended interfaces:
- Allow access to the FIPS service indicator via the new
GCRYCTL_FIPS_SERVICE_INDICATOR control code.
[T7338,rCd0db6a5abf,rCf51f4e9893]
- Add GCRYCTL_FIPS_REJECT_NON_FIPS control code. [T7338,rCe52adf0948]
- Add GCRY_FIPS_FLAG_REJECT_PK_FLAGS constant. [T7338,rC0414e126b9]
- Make SHA-1 non-FIPS internally for the 1.12 API. This introduces
the GCRY_FIPS_FLAG_REJECT_MD_SHA1 constant. [rC4ee91a94bc]
- Add GCRY_FIPS_FLAG_REJECT_PK_FLAGS. [rC0414e126b9]
- Provide macros for each KEM enum constant. [rCe9b1c3ec91]
- Add Dilithium (ML-DSA) support. [T7640]
- Support optional random-override and support byte string data.
[rCcbefff5fca,rC3bb4a54f43]
* Performance:
- Add VAES/AVX512 accelerated implementation for AES which boosts
OCB performance by about 2 times on AMD Zen5. [rC9e3af928ee]
- Avoid AVX512/AVX2/SSSE3 for single block processing with Zen5 for
ChaCha20. [rCc1d9fff3b2]
- Avoid AVX/AVX2/AVX512 when CPU has high vector inst latency like
Zen5 for Blake2. [rCe5bc3b2826]
- Various optimizations for Camellia.
[rCf5848080d4,rCb9bafd6c6c,rC8b538a8c76]
- Add POLYVAL acceleration for RISC-V and GCM-SIV. [rC00815c4207]
- Add RISC-V Zbb+Zbc implementation of CRC. [rCab4fa2a19c]
- Add RISC-V vector cryptography implementation of GHASH.
[rCcc2a4b6388]
- Add RISC-V vector cryptography implementation of AES.
[rCb000ab6025]
- Add RISC-V vector cryptography implementations of SHA256 and
SHA512. [rCcc1d5b0b5e]
- Add AVX2 and AVX512 code paths to improve CRC. [rCc30788969d]
* Bug fixes:
- Use secure MPI in _gcry_mpi_assign_limb_space. [rC6e77b09cff]
- Use CSIDL_COMMON_APPDATA instead of /etc on Windows. [rCd5e3cbfd88]
- Apply a Kyber patch from upstream. [rCbdc3724d72]
- Fix an edge case in Jent initialization. [rC0ceca9993f]
- mceliece6688128f: Fix stack overflow crash on win64/wine
[rC5bd9320171]
* Other:
- Add support for IBM z/OS, fixing -lpthread check with glibc.
[rC5af59d8454]
- Introduce mpi_tfr and use it for point_tfr to decrease EM signal
and increase EM noise. [rC4e65996bb8]
- Handle HAVE_BROKEN_MLOCK for the case of building with ASAN.
[T7889]
- Harden mask generation against branch optimization for several
algorithms. [e.g. rC4012e9a037,rCbf7546c502,rC052b03fb0c]
- Improve constant-time operation for ECDSA. [T7519,rC0bd4c77be6]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libgcrypt | 2 +-
lfs/libgcrypt | 6 +++---
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 3cdca7523..968c30cf4 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
#usr/lib/libgcrypt.la
#usr/lib/libgcrypt.so
usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.6.0
+usr/lib/libgcrypt.so.20.7.0
#usr/lib/pkgconfig/libgcrypt.pc
#usr/share/aclocal/libgcrypt.m4
#usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 2e5fb7e8a..2ddac800e 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 1.11.2
+VER = 1.12.0
THISAPP = libgcrypt-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 8ad2dd84e8ec2bddb5c008c6823a6d72b8f2d6237972966bc590be0d89bb6b50a5cbba1b42631d0950c4bea125a6d9a845fbf703b756a38088f66054712efa9c
+$(DL_FILE)_BLAKE2 = 2d600fb5288aed426d99fdd5628dd7382108301371f0d6488d5911f62519802e2b4b53181196955d084b5f11a71e4673b4064db407e1cc55eadc15610faf660c
install : $(TARGET)
--
2.53.0
next prev parent reply other threads:[~2026-02-14 15:20 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-14 15:20 [PATCH] core201: Ship hwdata Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship intel-microcode Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship libgcrypt Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship libpng Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship libuv Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship openvpn Adolf Belka
2026-02-14 15:20 ` [PATCH] core201: Ship vim Adolf Belka
2026-02-14 15:20 ` [PATCH] git: Update to version 2.53.0 Adolf Belka
2026-02-14 15:20 ` [PATCH] hwdata: Update to version 0.404 Adolf Belka
2026-02-14 15:20 ` [PATCH] intel-microcode: Update to version 20260210 Adolf Belka
2026-02-14 15:20 ` [PATCH] less: Update to version 692 Adolf Belka
2026-02-14 15:20 ` Adolf Belka [this message]
2026-02-14 15:20 ` [PATCH] libpng: Update to version 1.6.55 Adolf Belka
2026-02-14 15:20 ` [PATCH] libtalloc: Update to version 2.4.4 Adolf Belka
2026-02-14 15:20 ` [PATCH] libuv: Update to version 1.52.0 Adolf Belka
2026-02-14 15:20 ` [PATCH] nfs: Update to version 2.8.5 Adolf Belka
2026-02-14 15:20 ` [PATCH] openvpn: Update to version 2.6.19 Adolf Belka
2026-02-14 15:20 ` [PATCH] p11-kit: Update to version 0.26.2 Adolf Belka
2026-02-14 15:20 ` [PATCH] postfix: Update to version 3.10.7 Adolf Belka
2026-02-14 15:20 ` [PATCH] vim: Update to version 9.1.2147 Adolf Belka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260214152040.3720549-12-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox