nettle-bugs

nettle-bugs@lists.lysator.liu.se

1 participants
2193 discussions

[PATCH] some patches to fix compiler warnings
by Tim Ruehsen 19 Sep '12

19 Sep '12

Some things I fixed, when having a look at the sources. Just two points for code reviewing: 1. #define NONNULL(...) __attribute__ ((nonnull(__VA_ARGS__))) is contains a C99 feature (...), but there are also C99 long long constants somewhere in the code (if you mind C89 compliancy). 2. In cast128.c I removed the wiping of t, l and r. Instead I set t=0 at the beginning of the loops (It seemed to be used uninitialized in F1 macro). Please just have a short look into it - maybe the "wiping" has some undocumented deeper meaning !? Regards, Tim

4 29

Three tests can't be created
by Tim Ruehsen 13 Sep '12

13 Sep '12

Hi, there are three tests which cannot be build from source: testsuite/sexp-conv-test testsuite/symbols-test testsuite/pkcs1-conv-test If you remove them the following fails: make clean make make check Making check in testsuite make[1]: Entering directory `/usr/oms/src/nettle/testsuite' make[1]: *** No rule to make target `sexp-conv-test', needed by `check'. Stop. These three binaries are in the git repository ... what's that ? Shouldn't there be sources a possibility to build the binaries ? Regards ,Tim

2 2

minor documentation patches
by Daniel Kahn Gillmor 08 Aug '12

08 Aug '12

hi nettle folks-- i've pushed a couple minor documentation patches to my git repo at: git://lair.fifthhorseman.net/~dkg/nettle they're also attached below, if you prefer. Thanks for maintaining nettle, --dkg

1 0

Patch: Fix building of nettle-benchmark on uclibc systems
by Anthony G. Basile 07 Jul '12

07 Jul '12

Attached is a patch to fix the building of examples/nettle-benchmark on uclibc systems while not introducing a regression on glibc. The downstream bug is https://bugs.gentoo.org/show_bug.cgi?id=415193 -- Anthony G. Basile, Ph. D. Chair of Information Technology D'Youville College Buffalo, NY 14201 (716) 829-8197

2 1

ANNOUNCE: Nettle-2.5
by nisse＠lysator.liu.se 07 Jul '12

07 Jul '12

I'm happy to annnounce a new version of GNU Nettle, a low-level cryptographics library. The Nettle home page can be found at http://www.lysator.liu.se/~nisse/nettle/. NEWS for the 2.5 release This release includes important portability fixes for Windows and MacOS. There are also a few new features. First a *warning*: Some internal functions have been removed from the library. Since the functions in question are internal and not documented, this is not considered a change of ABI or API. Programs explicitly using any of these functions will break. * The function pkcs1_signature_prefix has been renamed to _pkcs1_signature_prefix, and with slightly different behavior. * The file nettle-internal.c is no longer included in the library (the features defined there are used by the benchmark and test programs, and were never intended for public use). New features: * Support for the salsa20 block cipher, including x86_64 assembler. Originally contributed by Simon Josefsson, based on the reference implementation, then further optimized. * Tentative interface for timing-resistant RSA functions, contributed by Nikos Mavrogiannopoulos. * A more general interface for PKCS#1 signatures, taking the input in the form of a "DigestInfo". Suggested by Nikos Mavrogiannopoulos. Configuration: * Building of shared libraries (./configure --enable-shared) is now enabled by default. * Various portability fixes for MacOS and M$ Windows. A lot of this work done by Martin Storsjö. * In particular, Nettle now hopefully works on 64-bit Windows builds, "W64", including the x86_64 assembly code. Miscellaneous: * Documentation and example programs for the base16 and base64 functions. Was contributed by Jeronimo Pellegrini back in 2006, but unfortunately forgotten until now. * Use an additional table to avoid GF2^8 multiplications in aes_invert_key (mainly used by aes_set_decrypt_key). Also tabulate round constants in aes_set_encrypt_key. * The nettle repository has been migrated from cvs to git, with a public repository at http://git.lysator.liu.se/nettle. To make it independent of the LSH repository, a few files have been moved around. While at it, files have also been converted from latin-1 to utf-8. The libraries are intended to be binary compatible with nettle-2.2 and later. The shared library names are libnettle.so.4.4 and libhogweed.so.2.2, with sonames still libnettle.so.4 and libhogweed.so.2 Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.5.tar.gz ftp://ftp.gnu.org/gnu/nettle/nettle-2.5.tar.gz and soon also at ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.5.tar.gz Happy hacking, /Niels Möller -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Final nettle-2.5 prerelease
by nisse＠lysator.liu.se 06 Jul '12

06 Jul '12

I think everything's in shape for release. But I'll postpone the formal release to an evening *before* having a glass or two of wine. ;-) So here's a final prerelease http://www.lysator.liu.se/~nisse/archive/nettle-2.5-pre2.tar.gz http://www.lysator.liu.se/~nisse/archive/nettle-2.5-pre2.tar.gz.sig Hopefully the 2.5 release will differ in filename only. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Getting a bit closer to release
by nisse＠lysator.liu.se 05 Jul '12

05 Jul '12

I've done some documentatiion for Salsa20, so we're getting closer to release. See http://www.lysator.liu.se/~nisse/nettle/plan.html. NEWS-file review and some more testing remains on the list. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 5

Using alloca on windows
by nisse＠lysator.liu.se 03 Jul '12

03 Jul '12

When I try cross-compiling using ./configure '--host=i586-mingw32msvc' I get warnings on alloca usage, e.g., /home/nisse/hack/nettle/cbc.c: In function `nettle_cbc_decrypt': /home/nisse/hack/nettle/cbc.c:101: warning: implicit declaration of function `alloca' /home/nisse/hack/nettle/cbc.c:101: warning: incompatible implicit declaration of built-in function `alloca' Which header should I include to get a proper declaration? In config.h, I have some boilerplate code which includes malloc.h, but only if *not* using gcc. Should I always include malloc.h if it exists, regardless of the compiler used? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 2

Interface for new rsa features
by nisse＠lysator.liu.se 20 Jun '12

20 Jun '12

In recent months, some new RSA functions have been added, from suggestions and work of Nikos. I'd like to hear comments on the interface before release. Timing resistant decryption function, using RSA blinding: int rsa_decrypt_tr(const struct rsa_public_key *pub, const struct rsa_private_key *key, void *random_ctx, nettle_random_func *random, unsigned *length, uint8_t *message, const mpz_t gibberish); New signing functions taking a "DigestInfo" as input: int rsa_pkcs1_sign(const struct rsa_private_key *key, unsigned length, const uint8_t *digest_info, mpz_t s); int rsa_pkcs1_verify(const struct rsa_public_key *key, unsigned length, const uint8_t *digest_info, const mpz_t signature); Timing-resistant version of the signing function: int rsa_pkcs1_sign_tr(const struct rsa_public_key *pub, const struct rsa_private_key *key, void *random_ctx, nettle_random_func random, unsigned length, const uint8_t *digest_info, mpz_t s); The _tr fucntions use these internal functions for RSA blinding: void _rsa_blind (const struct rsa_public_key *pub, void *random_ctx, nettle_random_func random, mpz_t c, mpz_t ri); void _rsa_unblind (const struct rsa_public_key *pub, mpz_t c, const mpz_t ri); Do you think this looks good? I see that there's some inconsistency of using "nettle_random_func random" vs "nettle_random_func *random", the latter variant is the preferred form. It would be nice with timing resistant versions of the other signing functions, byt I hesitate since we would end up with such a large number of functions. Some redesign (for some later version) may be appropriate. It's possible to do deterministic RSA blinding, using something like HMAC(encoding of private key, message) to generate the random number. And in similar way, one can do deterministic DSA signatures. That's also for later, but you may want to take that possibility into account when commenting on the interface. In somewhat related reorganization, the interface of the internal function pkcs1_signature_prefix has changed and is not compatible with the old version. Questions: 1. Is anyone depending on that function? 2. Does a change of this function require a new solib number? (Depends on the answer to previous question). 3. Should I rename it to _pkcs1_signature_prefix, in order to (i) make it more clear it's an internal function, and (ii) make applications depending on the old behaviour break in a more predictable fashion? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 2

Re: Problem with int types persists on nettle 2.4 and gnutls 3.0.19 on Solaris 9 Sparc
by Dagobert Michelsen 23 May '12

23 May '12

Hi, Am 08.05.2012 um 23:17 schrieb Paul Eggert: > On 05/08/2012 01:05 PM, Niels Möller wrote: >> I think it should work fine to just get the gnutls release and apply >> Paul's patch to the file gnutls-3.0.9/gl/stdint.in.h before running the >> configure script. > > Yes, that's the idea. Thanks. Sorry for the delay, I got distracted. I just tested the latest stdint.in.h from gnulib master and gnutls 3.0.19 passes this stage now. However, I didn't change anything on the nettle includes and now get lots of warnings. Probably the gl_* definitions should not belong to the installed nettle headers? CC pkcs12_bag.lo "/opt/csw/include/nettle/nettle-stdint.h", line 237: warning: typedef redeclared: gl_int_fast8_t "/opt/csw/include/nettle/nettle-stdint.h", line 238: warning: typedef redeclared: gl_int_fast16_t "/opt/csw/include/nettle/nettle-stdint.h", line 239: warning: typedef redeclared: gl_int_fast32_t "/opt/csw/include/nettle/nettle-stdint.h", line 241: warning: typedef redeclared: int64_t "/opt/csw/include/nettle/nettle-stdint.h", line 244: warning: typedef redeclared: gl_uint_fast8_t "/opt/csw/include/nettle/nettle-stdint.h", line 245: warning: typedef redeclared: gl_uint_fast16_t "/opt/csw/include/nettle/nettle-stdint.h", line 246: warning: typedef redeclared: gl_uint_fast32_t "/opt/csw/include/nettle/nettle-stdint.h", line 248: warning: typedef redeclared: uint64_t Best regards -- Dago -- "You don't become great by trying to be great, you become great by wanting to do something, and then doing it so hard that you become great in the process." - xkcd #896

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs