head 1.18; access; symbols pkgsrc-2023Q4:1.18.0.60 pkgsrc-2023Q4-base:1.18 pkgsrc-2023Q3:1.18.0.58 pkgsrc-2023Q3-base:1.18 pkgsrc-2023Q2:1.18.0.56 pkgsrc-2023Q2-base:1.18 pkgsrc-2023Q1:1.18.0.54 pkgsrc-2023Q1-base:1.18 pkgsrc-2022Q4:1.18.0.52 pkgsrc-2022Q4-base:1.18 pkgsrc-2022Q3:1.18.0.50 pkgsrc-2022Q3-base:1.18 pkgsrc-2022Q2:1.18.0.48 pkgsrc-2022Q2-base:1.18 pkgsrc-2022Q1:1.18.0.46 pkgsrc-2022Q1-base:1.18 pkgsrc-2021Q4:1.18.0.44 pkgsrc-2021Q4-base:1.18 pkgsrc-2021Q3:1.18.0.42 pkgsrc-2021Q3-base:1.18 pkgsrc-2021Q2:1.18.0.40 pkgsrc-2021Q2-base:1.18 pkgsrc-2021Q1:1.18.0.38 pkgsrc-2021Q1-base:1.18 pkgsrc-2020Q4:1.18.0.36 pkgsrc-2020Q4-base:1.18 pkgsrc-2020Q3:1.18.0.34 pkgsrc-2020Q3-base:1.18 pkgsrc-2020Q2:1.18.0.30 pkgsrc-2020Q2-base:1.18 pkgsrc-2020Q1:1.18.0.10 pkgsrc-2020Q1-base:1.18 pkgsrc-2019Q4:1.18.0.32 pkgsrc-2019Q4-base:1.18 pkgsrc-2019Q3:1.18.0.28 pkgsrc-2019Q3-base:1.18 pkgsrc-2019Q2:1.18.0.26 pkgsrc-2019Q2-base:1.18 pkgsrc-2019Q1:1.18.0.24 pkgsrc-2019Q1-base:1.18 pkgsrc-2018Q4:1.18.0.22 pkgsrc-2018Q4-base:1.18 pkgsrc-2018Q3:1.18.0.20 pkgsrc-2018Q3-base:1.18 pkgsrc-2018Q2:1.18.0.18 pkgsrc-2018Q2-base:1.18 pkgsrc-2018Q1:1.18.0.16 pkgsrc-2018Q1-base:1.18 pkgsrc-2017Q4:1.18.0.14 pkgsrc-2017Q4-base:1.18 pkgsrc-2017Q3:1.18.0.12 pkgsrc-2017Q3-base:1.18 pkgsrc-2017Q2:1.18.0.8 pkgsrc-2017Q2-base:1.18 pkgsrc-2017Q1:1.18.0.6 pkgsrc-2017Q1-base:1.18 pkgsrc-2016Q4:1.18.0.4 pkgsrc-2016Q4-base:1.18 pkgsrc-2016Q3:1.18.0.2 pkgsrc-2016Q3-base:1.18 pkgsrc-2016Q2:1.17.0.20 pkgsrc-2016Q2-base:1.17 pkgsrc-2016Q1:1.17.0.18 pkgsrc-2016Q1-base:1.17 pkgsrc-2015Q4:1.17.0.16 pkgsrc-2015Q4-base:1.17 pkgsrc-2015Q3:1.17.0.14 pkgsrc-2015Q3-base:1.17 pkgsrc-2015Q2:1.17.0.12 pkgsrc-2015Q2-base:1.17 pkgsrc-2015Q1:1.17.0.10 pkgsrc-2015Q1-base:1.17 pkgsrc-2014Q4:1.17.0.8 pkgsrc-2014Q4-base:1.17 pkgsrc-2014Q3:1.17.0.6 pkgsrc-2014Q3-base:1.17 pkgsrc-2014Q2:1.17.0.4 pkgsrc-2014Q2-base:1.17 pkgsrc-2014Q1:1.17.0.2 pkgsrc-2014Q1-base:1.17 pkgsrc-2013Q4:1.15.0.22 pkgsrc-2013Q4-base:1.15 pkgsrc-2013Q3:1.15.0.20 pkgsrc-2013Q3-base:1.15 pkgsrc-2013Q2:1.15.0.18 pkgsrc-2013Q2-base:1.15 pkgsrc-2013Q1:1.15.0.16 pkgsrc-2013Q1-base:1.15 pkgsrc-2012Q4:1.15.0.14 pkgsrc-2012Q4-base:1.15 pkgsrc-2012Q3:1.15.0.12 pkgsrc-2012Q3-base:1.15 pkgsrc-2012Q2:1.15.0.10 pkgsrc-2012Q2-base:1.15 pkgsrc-2012Q1:1.15.0.8 pkgsrc-2012Q1-base:1.15 pkgsrc-2011Q4:1.15.0.6 pkgsrc-2011Q4-base:1.15 pkgsrc-2011Q3:1.15.0.4 pkgsrc-2011Q3-base:1.15 pkgsrc-2011Q2:1.15.0.2 pkgsrc-2011Q2-base:1.15 pkgsrc-2011Q1:1.14.0.18 pkgsrc-2011Q1-base:1.14 pkgsrc-2010Q4:1.14.0.16 pkgsrc-2010Q4-base:1.14 pkgsrc-2010Q3:1.14.0.14 pkgsrc-2010Q3-base:1.14 pkgsrc-2010Q2:1.14.0.12 pkgsrc-2010Q2-base:1.14 pkgsrc-2010Q1:1.14.0.10 pkgsrc-2010Q1-base:1.14 pkgsrc-2009Q4:1.14.0.8 pkgsrc-2009Q4-base:1.14 pkgsrc-2009Q3:1.14.0.6 pkgsrc-2009Q3-base:1.14 pkgsrc-2009Q2:1.14.0.4 pkgsrc-2009Q2-base:1.14 pkgsrc-2009Q1:1.14.0.2 pkgsrc-2009Q1-base:1.14 pkgsrc-2008Q4:1.13.0.24 pkgsrc-2008Q4-base:1.13 pkgsrc-2008Q3:1.13.0.22 pkgsrc-2008Q3-base:1.13 cube-native-xorg:1.13.0.20 cube-native-xorg-base:1.13 pkgsrc-2008Q2:1.13.0.18 pkgsrc-2008Q2-base:1.13 cwrapper:1.13.0.16 pkgsrc-2008Q1:1.13.0.14 pkgsrc-2008Q1-base:1.13 pkgsrc-2007Q4:1.13.0.12 pkgsrc-2007Q4-base:1.13 pkgsrc-2007Q3:1.13.0.10 pkgsrc-2007Q3-base:1.13 pkgsrc-2007Q2:1.13.0.8 pkgsrc-2007Q2-base:1.13 pkgsrc-2007Q1:1.13.0.6 pkgsrc-2007Q1-base:1.13 pkgsrc-2006Q4:1.13.0.4 pkgsrc-2006Q4-base:1.13 pkgsrc-2006Q3:1.13.0.2 pkgsrc-2006Q3-base:1.13 pkgsrc-2006Q2:1.11.0.2 pkgsrc-2006Q2-base:1.11 pkgsrc-2006Q1:1.9.0.2 pkgsrc-2006Q1-base:1.9 pkgsrc-2005Q4:1.8.0.10 pkgsrc-2005Q4-base:1.8 pkgsrc-2005Q3:1.8.0.8 pkgsrc-2005Q3-base:1.8 pkgsrc-2005Q2:1.8.0.6 pkgsrc-2005Q2-base:1.8 pkgsrc-2005Q1:1.8.0.4 pkgsrc-2005Q1-base:1.8 pkgsrc-2004Q4:1.8.0.2 pkgsrc-2004Q4-base:1.8 pkgsrc-2004Q3:1.5.0.4 pkgsrc-2004Q3-base:1.5 pkgsrc-2004Q2:1.5.0.2 pkgsrc-2004Q2-base:1.5 pkgsrc-2004Q1:1.4.0.2 pkgsrc-2004Q1-base:1.4; locks; strict; comment @# @; 1.18 date 2016.08.17.23.13.11; author maya; state Exp; branches; next 1.17; commitid RyIhL09eOJbKiIiz; 1.17 date 2014.03.14.13.39.07; author gdt; state Exp; branches 1.17.20.1; next 1.16; commitid VwSyqer1tQ8DDFsx; 1.16 date 2014.01.01.11.49.59; author wiz; state Exp; branches; next 1.15; commitid A7mx1NrjLvjllpjx; 1.15 date 2011.04.22.13.42.47; author obache; state Exp; branches; next 1.14; 1.14 date 2009.03.20.19.25.18; author joerg; state Exp; branches; next 1.13; 1.13 date 2006.07.08.23.11.07; author jlam; state Exp; branches; next 1.12; 1.12 date 2006.07.08.22.39.37; author jlam; state Exp; branches; next 1.11; 1.11 date 2006.04.12.10.27.33; author rillig; state Exp; branches; next 1.10; 1.10 date 2006.04.06.06.22.42; author reed; state Exp; branches; next 1.9; 1.9 date 2006.02.05.23.10.44; author joerg; state Exp; branches; next 1.8; 1.8 date 2004.11.14.15.38.42; author ben; state Exp; branches; next 1.7; 1.7 date 2004.10.23.08.57.33; author shannonjr; state Exp; branches; next 1.6; 1.6 date 2004.10.03.00.18.09; author tv; state Exp; branches; next 1.5; 1.5 date 2004.05.26.07.44.58; author adam; state Exp; branches; next 1.4; 1.4 date 2004.03.18.09.12.14; author jlam; state Exp; branches; next 1.3; 1.3 date 2004.03.05.19.25.39; author jlam; state Exp; branches; next 1.2; 1.2 date 2004.02.25.18.10.49; author minskim; state Exp; branches; next 1.1; 1.1 date 2004.02.10.00.13.24; author jlam; state Exp; branches; next ; 1.17.20.1 date 2016.09.13.18.23.35; author bsiegert; state Exp; branches; next ; commitid ef3uLcbcp5EHP9mz; desc @@ 1.18 log @Update libgcrypt to 1.7.3 Changelog: 2016-08-17 Werner Koch Release 1.7.3. * configure.ac: Set LT version to C21/A1/R3. random: Hash continuous areas in the csprng pool. * random/random-csprng.c (mix_pool): Store the first hash at the end of the pool. random: Improve the diagram showing the random mixing. * random/random-csprng.c (mix_pool): Use DIGESTLEN instead of 20. 2016-07-19 Jussi Kivilinna crc-intel-pclmul: split assembly block to ease register pressure. * cipher/crc-intel-pclmul.c (crc32_less_than_16): Split inline assembly block handling 4 byte input into multiple blocks. rijndael-aesni: split assembly block to ease register pressure. * cipher/rijndael-aesni.c (do_aesni_ctr_4): Use single register constraint for passing 'bige_addb' to assembly block; split first inline assembly block into two parts. 2016-07-14 Jussi Kivilinna Add ARMv8/AArch32 Crypto Extension implementation of AES. * cipher/Makefile.am: Add 'rijndael-armv8-ce.c' and 'rijndael-armv-aarch32-ce.S'. * cipher/rijndael-armv8-aarch32-ce.S: New. * cipher/rijndael-armv8-ce.c: New. * cipher/rijndael-internal.h (USE_ARM_CE): New. (RIJNDAEL_context_s): Add 'use_arm_ce'. * cipher/rijndael.c [USE_ARM_CE] (_gcry_aes_armv8_ce_setkey) (_gcry_aes_armv8_ce_prepare_decryption) (_gcry_aes_armv8_ce_encrypt, _gcry_aes_armv8_ce_decrypt) (_gcry_aes_armv8_ce_cfb_enc, _gcry_aes_armv8_ce_cbc_enc) (_gcry_aes_armv8_ce_ctr_enc, _gcry_aes_armv8_ce_cfb_dec) (_gcry_aes_armv8_ce_cbc_dec, _gcry_aes_armv8_ce_ocb_crypt) (_gcry_aes_armv8_ce_ocb_auth): New. (do_setkey) [USE_ARM_CE]: Add ARM CE/AES HW feature check and key setup for ARM CE. (prepare_decryption, _gcry_aes_cfb_enc, _gcry_aes_cbc_enc) (_gcry_aes_ctr_enc, _gcry_aes_cfb_dec, _gcry_aes_cbc_dec) (_gcry_aes_ocb_crypt, _gcry_aes_ocb_auth) [USE_ARM_CE]: Add ARM CE support. * configure.ac: Add 'rijndael-armv8-ce.lo' and 'rijndael-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of GCM. * cipher/Makefile.am: Add 'cipher-gcm-armv8-aarch32-ce.S'. * cipher/cipher-gcm-armv8-aarch32-ce.S: New. * cipher/cipher-gcm.c [GCM_USE_ARM_PMULL] (_gcry_ghash_setup_armv8_ce_pmull, _gcry_ghash_armv8_ce_pmull) (ghash_setup_armv8_ce_pmull, ghash_armv8_ce_pmull): New. (setupM) [GCM_USE_ARM_PMULL]: Enable ARM PMULL implementation if HWF_ARM_PULL HW feature flag is enabled. * cipher/cipher-gcm.h (GCM_USE_ARM_PMULL): New. Add ARMv8/AArch32 Crypto Extension implemenation of SHA-256. * cipher/Makefile.am: Add 'sha256-armv8-aarch32-ce.S'. * cipher/sha256-armv8-aarch32-ce.S: New. * cipher/sha256.c (USE_ARM_CE): New. (sha256_init, sha224_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha256_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports. (SHA256_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha256-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of SHA-1. * cipher/Makefile.am: Add 'sha1-armv8-aarch32-ce.S'. * cipher/sha1-armv7-neon.S (_gcry_sha1_transform_armv7_neon): Add missing size. * cipher/sha1-armv8-aarch32-ce.S: New. * cipher/sha1.c (USE_ARM_CE): New. (sha1_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha1_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports it. * cipher/sha1.h (SHA1_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha1-armv8-aarch32-ce.lo'. Add HW feature check for ARMv8 AArch64 and crypto extensions. * configure.ac: Add '--disable-arm-crypto-support'; enable hwf-arm module on 64-bit ARM. (armcryptosupport, gcry_cv_gcc_inline_aarch32_crypto) (gcry_cv_inline_asm_aarch64_neon) (gcry_cv_gcc_inline_asm_aarch64_crypto): New. * src/g10lib.h (HWF_ARM_AES, HWF_ARM_SHA1, HWF_ARM_SHA2) (HWF_ARM_PMULL): New. * src/hwf-arm.c [__aarch64__]: Enable building in AArch64 mode. (feature_map_s): New. [__arm__] (AT_HWCAP, AT_HWCAP2, HWCAP2_AES, HWCAP2_PMULL) (HWCAP2_SHA1, HWCAP2_SHA2, arm_features): New. [__aarch64__] (AT_HWCAP, AT_HWCAP2, HWCAP_ASIMD, HWCAP_AES) (HWCAP_PMULL, HWCAP_SHA1, HWCAP_SHA2, arm_features): New. (get_hwcap): Add reading of 'AT_HWCAP2'; Change auxv use 'unsigned long'. (detect_arm_at_hwcap): Add mapping of HWCAP/HWCAP2 to HWF flags. (detect_arm_proc_cpuinfo): Add mapping of CPU features to HWF flags. (_gcry_hwf_detect_arm): Use __ARM_NEON instead of legacy __ARM_NEON__. * src/hwfeatures.c (hwflist): Add 'arm-aes', 'arm-sha1', 'arm-sha2' and 'arm-pmull'. @ text @# $NetBSD: buildlink3.mk,v 1.17 2014/03/14 13:39:07 gdt Exp $ BUILDLINK_TREE+= libgcrypt .if !defined(LIBGCRYPT_BUILDLINK3_MK) LIBGCRYPT_BUILDLINK3_MK:= BUILDLINK_API_DEPENDS.libgcrypt+= libgcrypt>=1.2.0 BUILDLINK_ABI_DEPENDS.libgcrypt+= libgcrypt>=1.6.0 BUILDLINK_PKGSRCDIR.libgcrypt?= ../../security/libgcrypt .include "../../security/libgpg-error/buildlink3.mk" .endif # LIBGCRYPT_BUILDLINK3_MK BUILDLINK_TREE+= -libgcrypt @ 1.17 log @Drop inclusion of mk/pthread.buildlink3.mk from libgcrypt bl3. libgcrypt installs a library and 3 binaries, none of which are linked against pthreads (on NetBSD 6). It installs one .h, which also does not reference pthreads. However, it contains a comment that thread callbacks were removed from libgcrypt as of 1.6. I rebuilt dirmngr, glib-networking, gnupg2, libgnome-keyring, libksba, libotr, libxslt, and pidgin-otr with the new version with no issues. Note that I am not removing mk/pthread.buildlink3.mk from Makefile, because it builds t-lock (used in make test but not installed) with threads. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.16 2014/01/01 11:49:59 wiz Exp $ d10 1 a10 1 BUILDLINK_PKGSRCDIR.libgcrypt?= ../../security/libgcrypt @ 1.17.20.1 log @Pullup ticket #5100 - requested by maya security/gnupg: security fix security/libgcrypt: security fix, build fix Revisions pulled up: - security/gnupg/Makefile 1.134 - security/gnupg/distinfo 1.70 - security/libgcrypt/Makefile 1.82-1.84 - security/libgcrypt/buildlink3.mk 1.18 - security/libgcrypt/distinfo 1.67-1.68 - security/libgcrypt/patches/patch-aa 1.9 --- Module Name: pkgsrc Committed By: maya Date: Wed Aug 17 23:05:19 UTC 2016 Modified Files: pkgsrc/security/gnupg: Makefile distinfo Log Message: Update gnupg to 1.4.21 Changelog: 2016-08-17 Werner Koch Release 1.4.21. gpg: Add dummy option --with-subkey-fingerprint. * g10/gpg.c (opts): Add dummy option. build: Create a swdb file during "make distcheck". * Makefile.am (distcheck-hook): New. 2016-08-17 Ineiev po: Update Russian translation. 2016-08-17 Werner Koch random: Hash continuous areas in the csprng pool. * cipher/random.c (mix_pool): Store the first hash at the end of the pool. cipher: Improve readability by using a macro. * cipher/random.c (mix_pool): Use DIGESTLEN instead of 20. 2016-08-09 Daniel Kahn Gillmor gpg: Avoid publishing the GnuPG version by default. * g10/gpg.c (main): initialize opt.emit_version to 0 * doc/gpg.texi: document different default for --emit-version 2016-08-04 Daniel Kahn Gillmor Clean up "allow to" * README, cipher/cipher.c, cipher/pubkey.c, doc/gpg.texi: replace "allow to" with clearer text In standard English, the normal construction is "${XXX} allows ${YYY} to" -- that is, the subject (${XXX}) of the sentence is allowing the object (${YYY}) to do something. When the object is missing, the phrasing sounds awkward, even if the object is implied by context. There's almost always a better construction that isn't as awkward. These changes should make the language a bit clearer. Fix spelling: "occured" should be "occurred" * checks/armor.test, cipher/des.c, g10/ccid-driver.c, g10/pkclist.c, util/regcomp.c, util/regex_internal.c: correct the spelling of "occured" to "occurred" 2016-08-04 NIIBE Yutaka g10: Fix checking key for signature validation. * g10/sig-check.c (signature_check2): Not only subkey, but also primary key should have flags.valid=1. 2016-08-03 Justus Winter Partially revert "g10: Fix another race condition for trustdb access." This amends db246f8b which accidentally included the compiled translation files. 2016-07-09 NIIBE Yutaka gpgv: Tweak default options for extra security. * g10/gpgv.c (main): Set opt.no_sig _cache, so that it doesn't depend on cached status. Similarly, set opt.flags.require_cross_cert for backsig validation for subkey signature. 2016-07-06 NIIBE Yutaka g10: Fix keysize with --expert. * g10/keygen.c (ask_keysize): It's 768 only for DSA. 2016-06-28 NIIBE Yutaka g10: Fix --list-packets. * g10/gpg.c (main): Call set_packet_list_mode after assignment of opt.list_packets. * g10/mainproc.c (do_proc_packets): Don't stop processing with --list-packets as the comment says. * g10/options.h (list_packets): Fix the comment. * g10/parse-packet.c: Fix the condition for opt.list_packets. 2016-06-15 Niibe Yutaka g10: Fix another race condition for trustdb access. * g10/tdbio.c (create_version_record): Call create_hashtable to always make hashtable, together with the version record. (get_trusthashrec): Remove call to create_hashtable. 2016-02-12 NIIBE Yutaka g10: Make sure to have the directory for trustdb. * g10/tdbio.c (tdbio_set_dbname): Return earlier if !CREATE. Check the directory and create it if none before calling take_write_lock. 2016-02-01 Werner Koch Fix possible sign extension problem with newer compilers. * cipher/des.c (READ_64BIT_DATA): Cast to u32 before shifting by 24. * cipher/blowfish.c (do_encrypt_block): Ditto. (do_decrypt_block): Ditto. * cipher/camellia.c (CAMELLIA_RR8): Ditto. * cipher/cast5.c (do_encrypt_block): Ditto. (do_decrypt_block): Ditto. (do_cast_setkey): Ditto. * cipher/twofish.c (INPACK): Ditto. * util/iobuf.c (block_filter): Ditto. 2016-01-26 NIIBE Yutaka g10: Fix iobuf API of filter function for alignment. * include/iobuf.h (struct iobuf_struct): Remove DESC. * util/iobuf.c (iobuf_desc): New. (print_chain, iobuf_close, iobuf_open, iobuf_fdopen, iobuf_sockopen) (iobuf_create, iobuf_append, iobuf_openrw, iobuf_ioctl) (iobuf_push_filter2, pop_filter, underflow): Use iobuf_desc. (file_filter, sock_filter, block_filter): Fill the description. * g10/armor.c, g10/cipher.c, g10/compress-bz2.c, g10/compress.c, g10/encode.c, g10/encr-data.c, g10/mdfilter.c, g10/pipemode.c, g10/progress.c, g10/textfilter.c: Likewise. 2016-01-15 Werner Koch Fix possible AIX problem with sysconf in rndunix. * cipher/rndunix.c [HAVE_STDINT_H]: Include stdint.h. (start_gatherer): Detect misbehaving sysconf. 2016-01-13 NIIBE Yutaka Fix to support git worktree. * Makefile.am: Use -e for testing .git. 2015-12-21 NIIBE Yutaka po: Update Japanese translation. --- Module Name: pkgsrc Committed By: maya Date: Wed Aug 17 23:13:11 UTC 2016 Modified Files: pkgsrc/security/libgcrypt: Makefile buildlink3.mk distinfo Log Message: Update libgcrypt to 1.7.3 Changelog: 2016-08-17 Werner Koch Release 1.7.3. * configure.ac: Set LT version to C21/A1/R3. random: Hash continuous areas in the csprng pool. * random/random-csprng.c (mix_pool): Store the first hash at the end of the pool. random: Improve the diagram showing the random mixing. * random/random-csprng.c (mix_pool): Use DIGESTLEN instead of 20. 2016-07-19 Jussi Kivilinna crc-intel-pclmul: split assembly block to ease register pressure. * cipher/crc-intel-pclmul.c (crc32_less_than_16): Split inline assembly block handling 4 byte input into multiple blocks. rijndael-aesni: split assembly block to ease register pressure. * cipher/rijndael-aesni.c (do_aesni_ctr_4): Use single register constraint for passing 'bige_addb' to assembly block; split first inline assembly block into two parts. 2016-07-14 Jussi Kivilinna Add ARMv8/AArch32 Crypto Extension implementation of AES. * cipher/Makefile.am: Add 'rijndael-armv8-ce.c' and 'rijndael-armv-aarch32-ce.S'. * cipher/rijndael-armv8-aarch32-ce.S: New. * cipher/rijndael-armv8-ce.c: New. * cipher/rijndael-internal.h (USE_ARM_CE): New. (RIJNDAEL_context_s): Add 'use_arm_ce'. * cipher/rijndael.c [USE_ARM_CE] (_gcry_aes_armv8_ce_setkey) (_gcry_aes_armv8_ce_prepare_decryption) (_gcry_aes_armv8_ce_encrypt, _gcry_aes_armv8_ce_decrypt) (_gcry_aes_armv8_ce_cfb_enc, _gcry_aes_armv8_ce_cbc_enc) (_gcry_aes_armv8_ce_ctr_enc, _gcry_aes_armv8_ce_cfb_dec) (_gcry_aes_armv8_ce_cbc_dec, _gcry_aes_armv8_ce_ocb_crypt) (_gcry_aes_armv8_ce_ocb_auth): New. (do_setkey) [USE_ARM_CE]: Add ARM CE/AES HW feature check and key setup for ARM CE. (prepare_decryption, _gcry_aes_cfb_enc, _gcry_aes_cbc_enc) (_gcry_aes_ctr_enc, _gcry_aes_cfb_dec, _gcry_aes_cbc_dec) (_gcry_aes_ocb_crypt, _gcry_aes_ocb_auth) [USE_ARM_CE]: Add ARM CE support. * configure.ac: Add 'rijndael-armv8-ce.lo' and 'rijndael-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of GCM. * cipher/Makefile.am: Add 'cipher-gcm-armv8-aarch32-ce.S'. * cipher/cipher-gcm-armv8-aarch32-ce.S: New. * cipher/cipher-gcm.c [GCM_USE_ARM_PMULL] (_gcry_ghash_setup_armv8_ce_pmull, _gcry_ghash_armv8_ce_pmull) (ghash_setup_armv8_ce_pmull, ghash_armv8_ce_pmull): New. (setupM) [GCM_USE_ARM_PMULL]: Enable ARM PMULL implementation if HWF_ARM_PULL HW feature flag is enabled. * cipher/cipher-gcm.h (GCM_USE_ARM_PMULL): New. Add ARMv8/AArch32 Crypto Extension implemenation of SHA-256. * cipher/Makefile.am: Add 'sha256-armv8-aarch32-ce.S'. * cipher/sha256-armv8-aarch32-ce.S: New. * cipher/sha256.c (USE_ARM_CE): New. (sha256_init, sha224_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha256_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports. (SHA256_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha256-armv8-aarch32-ce.lo'. Add ARMv8/AArch32 Crypto Extension implementation of SHA-1. * cipher/Makefile.am: Add 'sha1-armv8-aarch32-ce.S'. * cipher/sha1-armv7-neon.S (_gcry_sha1_transform_armv7_neon): Add missing size. * cipher/sha1-armv8-aarch32-ce.S: New. * cipher/sha1.c (USE_ARM_CE): New. (sha1_init): Check features for HWF_ARM_SHA1. [USE_ARM_CE] (_gcry_sha1_transform_armv8_ce): New. (transform) [USE_ARM_CE]: Use ARMv8 CE implementation if HW supports it. * cipher/sha1.h (SHA1_CONTEXT): Add 'use_arm_ce'. * configure.ac: Add 'sha1-armv8-aarch32-ce.lo'. Add HW feature check for ARMv8 AArch64 and crypto extensions. * configure.ac: Add '--disable-arm-crypto-support'; enable hwf-arm module on 64-bit ARM. (armcryptosupport, gcry_cv_gcc_inline_aarch32_crypto) (gcry_cv_inline_asm_aarch64_neon) (gcry_cv_gcc_inline_asm_aarch64_crypto): New. * src/g10lib.h (HWF_ARM_AES, HWF_ARM_SHA1, HWF_ARM_SHA2) (HWF_ARM_PMULL): New. * src/hwf-arm.c [__aarch64__]: Enable building in AArch64 mode. (feature_map_s): New. [__arm__] (AT_HWCAP, AT_HWCAP2, HWCAP2_AES, HWCAP2_PMULL) (HWCAP2_SHA1, HWCAP2_SHA2, arm_features): New. [__aarch64__] (AT_HWCAP, AT_HWCAP2, HWCAP_ASIMD, HWCAP_AES) (HWCAP_PMULL, HWCAP_SHA1, HWCAP_SHA2, arm_features): New. (get_hwcap): Add reading of 'AT_HWCAP2'; Change auxv use 'unsigned long'. (detect_arm_at_hwcap): Add mapping of HWCAP/HWCAP2 to HWF flags. (detect_arm_proc_cpuinfo): Add mapping of CPU features to HWF flags. (_gcry_hwf_detect_arm): Use __ARM_NEON instead of legacy __ARM_NEON__. * src/hwfeatures.c (hwflist): Add 'arm-aes', 'arm-sha1', 'arm-sha2' and 'arm-pmull'. --- Module Name: pkgsrc Committed By: wiz Date: Sat Aug 20 19:22:37 UTC 2016 Modified Files: pkgsrc/security/libgcrypt: Makefile Log Message: Depends on libgpg-error-1.13. >From David H. Gutteridge in PR 51430. --- Module Name: pkgsrc Committed By: fhajny Date: Thu Sep 1 10:19:30 UTC 2016 Modified Files: pkgsrc/security/libgcrypt: Makefile distinfo pkgsrc/security/libgcrypt/patches: patch-aa Log Message: Use COMPILER_RPATH_FLAG properly. Reconciles libgcrypt-config with Darwin linker. Fixes joyent/pkgsrc#400. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.17 2014/03/14 13:39:07 gdt Exp $ d10 1 a10 1 BUILDLINK_PKGSRCDIR.libgcrypt?= ../../security/libgcrypt @ 1.16 log @Update to 1.6.0: Noteworthy changes in version 1.6.0 (2013-12-16) ------------------------------------------------ * Removed the long deprecated gcry_ac interface. Thus Libgcrypt is not anymore ABI compatible to previous versions if they used the ac interface. * Removed the module register subsystem. * The deprecated message digest debug macros have been removed. Use gcry_md_debug instead. * Removed deprecated control codes. * Improved performance of most cipher algorithms as well as for the SHA family of hash functions. * Added support for the IDEA cipher algorithm. * Added support for the Salsa20 and reduced Salsa20/12 stream ciphers. * Added limited support for the GOST 28147-89 cipher algorithm. * Added support for the GOST R 34.11-94 and R 34.11-2012 (Stribog) hash algorithms. * Added a random number generator to directly use the system's RNG. Also added an interface to prefer the use of a specified RNG. * Added support for the SCRYPT algorithm. * Mitigated the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See [CVE-2013-4242]. * Added support for Deterministic DSA as per RFC-6969. * Added support for curve Ed25519. * Added a scatter gather hash convenience function. * Added several MPI amd SEXP helper functions. * Added support for negative numbers to gcry_mpi_print, gcry_mpi_aprint and gcry_mpi_scan. * The algorithm ids GCRY_PK_ECDSA and GCRY_PK_ECDH are now deprecated. Use GCRY_PK_ECC if you need an algorithm id. * Changed gcry_pk_genkey for "ecc" to only include the curve name and not the parameters. The flag "param" may be used to revert this. * Added a feature to globally disable selected hardware features. * Added debug helper functions. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.15 2011/04/22 13:42:47 obache Exp $ a12 1 .include "../../mk/pthread.buildlink3.mk" @ 1.15 log @recursive bump from gettext-lib shlib bump. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.14 2009/03/20 19:25:18 joerg Exp $ d9 1 a9 1 BUILDLINK_ABI_DEPENDS.libgcrypt+= libgcrypt>=1.4.6nb2 @ 1.14 log @Simply and speed up buildlink3.mk files and processing. This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.13 2006/07/08 23:11:07 jlam Exp $ d9 1 a9 1 BUILDLINK_ABI_DEPENDS.libgcrypt+= libgcrypt>=1.2.2nb1 @ 1.13 log @Change the format of BUILDLINK_ORDER to contain depth information as well, and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.12 2006/07/08 22:39:37 jlam Exp $ d3 1 a3 2 BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH}+ LIBGCRYPT_BUILDLINK3_MK:= ${LIBGCRYPT_BUILDLINK3_MK}+ d5 2 a6 3 .if !empty(BUILDLINK_DEPTH:M+) BUILDLINK_DEPENDS+= libgcrypt .endif a7 5 BUILDLINK_PACKAGES:= ${BUILDLINK_PACKAGES:Nlibgcrypt} BUILDLINK_PACKAGES+= libgcrypt BUILDLINK_ORDER:= ${BUILDLINK_ORDER} ${BUILDLINK_DEPTH}libgcrypt .if !empty(LIBGCRYPT_BUILDLINK3_MK:M+) a10 1 .endif # LIBGCRYPT_BUILDLINK3_MK d14 1 d16 1 a16 1 BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH:S/+$//} @ 1.12 log @Track information in a new variable BUILDLINK_ORDER that informs us of the order in which buildlink3.mk files are (recursively) included by a package Makefile. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.11 2006/04/12 10:27:33 rillig Exp $ d12 1 a12 1 BUILDLINK_ORDER+= libgcrypt @ 1.11 log @Aligned the last line of the buildlink3.mk files with the first line, so that they look nicer. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.10 2006/04/06 06:22:42 reed Exp $ d12 1 @ 1.10 log @Over 1200 files touched but no revisions bumped :) RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day). @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.9 2006/02/05 23:10:44 joerg Exp $ d22 1 a22 1 BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH:S/+$//} @ 1.9 log @Recursive revision bump / recommended bump for gettext ABI change. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.8 2004/11/14 15:38:42 ben Exp $ d14 2 a15 2 BUILDLINK_DEPENDS.libgcrypt+= libgcrypt>=1.2.0 BUILDLINK_RECOMMENDED.libgcrypt+= libgcrypt>=1.2.2nb1 @ 1.8 log @As it was, libtool failed to link to libgcrypt on NetBSD 1.6.x because buildlink did not bring in PTH. For example, this made opencdk fail to build. Fix this by adding mk/pthread.buildlink3.mk to security/gcrypt/buildlink3.mk @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.7 2004/10/23 08:57:33 shannonjr Exp $ d15 1 a15 1 BUILDLINK_RECOMMENDED.libgcrypt+= libgcrypt>=1.2.0nb3 @ 1.7 log @Re: pkg/27317 The header gcrypt.h references struct timeval without including sys/time.h. Added the patch summitted with PR that adds an include for sys/time.h. Bumped PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.6 2004/10/03 00:18:09 tv Exp $ d20 1 @ 1.6 log @Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10 in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.5 2004/05/26 07:44:58 adam Exp $ d15 1 a15 1 BUILDLINK_RECOMMENDED.libgcrypt+= libgcrypt>=1.2.0nb2 @ 1.5 log @buildlink3 now requires libgcrypt 1.2.0 or higher @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.4 2004/03/18 09:12:14 jlam Exp $ d15 1 @ 1.4 log @Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properly by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for correctly ensured that was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.3 2004/03/05 19:25:39 jlam Exp $ d14 1 a14 1 BUILDLINK_DEPENDS.libgcrypt+= libgcrypt>=1.1.92 @ 1.3 log @Reorder location and setting of BUILDLINK_PACKAGES to match template buildlink3.mk file in revision 1.101 of bsd.buildlink3.mk. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.2 2004/02/25 18:10:49 minskim Exp $ d16 1 a19 2 .endif # LIBGCRYPT_BUILDLINK3_MK @ 1.2 log @Bump BUILDLINK_DEPENDS due to library major bump. @ text @d1 1 a1 1 # $NetBSD: buildlink3.mk,v 1.1 2004/02/10 00:13:24 jlam Exp $ d10 3 a13 1 BUILDLINK_PACKAGES+= libgcrypt d17 3 a19 2 . include "../../security/libgpg-error/buildlink3.mk" .endif # LIBGCRYPT_BUILDLINK3_MK @ 1.1 log @bl3ify and remove libiconv and gettext-lib buildlink files. This package really only needs gettext-lib through libgpg-error, and doesn't need libiconv at all unless it uses the pkgsrc gettext-lib. The gettext-lib buildlink3.mk file combined with the buildlink3 framework is considerably better at detecting this than the buildlink2.mk, which broke in a lot of instances. @ text @d1 1 a1 1 # $NetBSD$ d12 1 a12 1 BUILDLINK_DEPENDS.libgcrypt+= libgcrypt>=1.1.90 @