nettle-bugs

nettle-bugs@lists.lysator.liu.se

2198 discussions

ANNOUNCE: Nettle-2.4
by nisse＠lysator.liu.se 03 Sep '11

03 Sep '11

Due to a bug discovered in Nettle-2.3, released yesterday, I'm a bit embarrassed to announce a new release of GNU Nettle. Nettle is a low-level cryptographic library. Homepage at http://www.lysator.liu.se/~nisse/nettle/. NEWS for the 2.4 release This is a bugfix release only. It turned out ripemd160 in the 2.3 release was broken on all big-endian systems, due to a missing include of config.h. nettle-2.4 fixes this. The library is intended to be binary compatible with nettle-2.2 and nettle-2.3. The shared library names are libnettle.so.4.3 and libhogweed.so.2.1, with sonames still libnettle.so.4 and libhogweed.so.2. NEWS for the 2.3 release * Support for the ripemd-160 hash function. * Generates and installs nettle.pc and hogweed.pc files, for use with pkg-config. Feedback appreciated. For projects using autoconf, the traditional non-pkg-config ways of detecting libraries, and setting LIBS and LDFLAGS, is still recommended. * Fixed a bug which made the testsuite fail in the GCM test on certain platforms. Should not affect any documented features of the library. * Reorganization of the code for the various Merkle-Damgård hash functions. Some fields in the context structs for md4, md5 and sha1 have been renamed, for consistency. Applications should not peek inside these structs, and the ABI is unchanged. * In the manual, fixed mis-placed const in certain function prototypes. The library is intended to be binary compatible with nettle-2.2. The shared library names are libnettle.so.4.2 and libhogweed.so.2.1, with sonames still libnettle.so.4 and libhogweed.so.2. The latest version is available at http://www.lysator.liu.se/~nisse/archive/nettle-2.4.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.4.tar.gz ftp://ftp.gnu.org/gnu/nettle/nettle-2.4.tar.gz Happy hacking, /Niels möller -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

ANNOUNCE: Nettle-2.3
by nisse＠lysator.liu.se 03 Sep '11

03 Sep '11

I'm happy to announce a new version of GNU Nettle, a low-level cryptographics library. The Nettle home page can be found at http://www.lysator.liu.se/~nisse/nettle/. NEWS for the 2.3 release * Support for the ripemd-160 hash function. * Generates and installs nettle.pc and hogweed.pc files, for use with pkg-config. Feedback appreciated. For projects using autoconf, the traditional non-pkg-config ways of detecting libraries, and setting LIBS and LDFLAGS, is still recommended. * Fixed a bug which made the testsuite fail in the GCM test on certain platforms. Should not affect any documented features of the library. * Reorganization of the code for the various Merkle-Damgård hash functions. Some fields in the context structs for md4, md5 and sha1 have been renamed, for consistency. Applications should not peek inside these structs, and the ABI is unchanged. * In the manual, fixed mis-placed const in certain function prototypes. The library is intended to be binary compatible with nettle-2.2. The shared library names are libnettle.so.4.2 and libhogweed.so.2.1, with sonames still libnettle.so.4 and libhogweed.so.2. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.3.tar.gz and soon also at ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.3.tar.gz ftp://ftp.gnu.org/gnu/nettle/nettle-2.3.tar.gz Happy hacking, /Niels Möller -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 1

RIPEMD-160 Implementation
by Andres Mejia 01 Sep '11

01 Sep '11

Here's a patch that will implement RIPEMD-160 for nettle. It's code ported from libgcrypt. A reference to RIPEMD-160 is in the source. Also, this patch includes testcases and I followed what looked to me as nettle coding conventions. There's no documentation update in this patch. I didn't look into how documentation was generated in nettle. Also, this patch is against the nettle-2.2 release. I couldn't get the CVS snapshot of nettle building, particularly because of the integration of LSH. -- Regards, Andres Mejia

2 8

make in freebsd
by Nikos Mavrogiannopoulos 28 Aug '11

28 Aug '11

Hello, I tried to do a "./configure && make" in freebsd an got an error during make. If I use GNU make instead it works. I attach the error output from the make command and the generated Makefile. regards, Nikos

2 3

Re: RIPEMD-160 Implementation
by Nikos Mavrogiannopoulos 27 Aug '11

27 Aug '11

On 08/27/2011 09:05 PM, Niels Möller wrote: > Are any other variants of ripemd in use? (According to wikipedia, > there's original ripemd, ripemd-128, ripend-160, ripemd-256 and > ripemd-320, but I have no idea which of them are in use today or are > likely to be used in the future). ripemd and ripemd-128 are considered broken. I don't know if ripemd-x, x>=256 have been used anywhere. Having the SHA-3 winner instead would be a much better choice. regards, Nikos

2 2

Few Questions About Nettle Project
by Andres Mejia 26 Aug '11

26 Aug '11

Hi, Keep up the great work. I was looking for an LGPL-2.1 crypto library that can be used as an alternative to libgcrypt. Reason being can best be explained at [1]. So here are some questions I have. GNU Nettle is going to stick with LGPL-2.1+ correct? I ask this since I'm currently working on implementing full RAR archive support with libarchive, to ultimately be used in XBMC Media Center. XBMC is GPL-2+ and we have no desire to go to GPL-3. Another question, the only thing I see missing in nettle that libarchive can make use of is RIPEMD-160. In case I want to submit patches, I should submit them here correct? Also, I suppose if I wanted to submit patches, there's no issue in porting code from gcrypt over to nettle correct? I think it would be easier (and faster) to reuse the implementation in gcrypt than to implement the algorithm from scratch. -- Regards, Andres Mejia 1. http://lists.debian.org/debian-devel/2011/04/msg01170.html

3 5

ECC support
by Nikos Mavrogiannopoulos 15 Aug '11

15 Aug '11

Hello, This patch adds ECC support using the GnuTLS libtomcrypt adaptation. regards, Nikos btw. I had issues building the cvs version. The compilation was failing: nettle-hash.o: In function `list_algorithms': /home/nmav/cvs/lsh/nettle/tools/nettle-hash.c:49: undefined reference to `nettle_hashes'

2 5

pkg-config
by nisse＠lysator.liu.se 20 Jul '11

20 Jul '11

I just checked in nettle.pc.in and hogweed.pc.in. configure then generates nettle.pc and hogweed.pc, for use wiith pkg-config. I don't have any previous experience with pkg-config, so comments are much appreciated. Not yet any make rules to install them. I don't know if installation should be unconditional, or if one should first check, somehow, if pkg-config is installed. (And then hogweed.pc should be installed only if the hogweed library is built and installed). Apparantly, at least one user wants pkg-config support, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634294 Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

ECC
by Nikos Mavrogiannopoulos 17 Jul '11

17 Jul '11

I'm working towards adding ECDH and ECDSA support to gnutls. I've currently ported libtomcrypt to use gmp directly and nettle's types. The code is under development, and can be found at: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=tree;f=lib/nettle;h=23d9… The ECC functionality is confined to the ecc* files. It would be nice if nettle included it or something similar. btw. Is there any plan on an 2.2 release? regards, Nikos

3 27

ANNOUNCE: Nettle-2.2
by nisse＠lysator.liu.se 11 Jul '11

11 Jul '11

I'm happy to announce a new version of GNU Nettle, a low-level cryptographic library. Unlike earlier releases, nettle is now licenced under the LGPL, rather then the GPL. The nettle home page can be found at http://www.lysator.liu.se/~nisse/nettle/ NEWS for the 2.2 release Licensing change: * Relicensed as LGPL v2.1 or later (user's option). * Replaced blowfish and serpent implementation. New code is based on the LGPLed code in libgcrypt. New features: * Support for Galois/Counter Mode (GCM). * New interface for enumerating (most) available algorithms, contributed by Daniel Kahn Gillmor. * New tool nettle-hash. Can generate hash digests using any supported hash function, with output compatible with md5sum and friends from GNU coreutils. Checking (like md5sum -c) not yet implemented. Bug fixes: * The old serpent code had a byte order bug (introduced by yours truly about ten years ago). New serpent implementation does not interoperate with earlier versions of nettle. * Fixed ABI-dependent libdir default for Linux-based systems which do not follow the Linux File Hierarchy Standard, e.g., Debian GNU/Linux. Optimizations: * x86_64 implemention of serpent. * x86_64 implemention of camellia. * Optimized memxor using word rather than byte operations. Both generic C and x86_64 assembler. * Eliminated a memcpy for in-place CBC decrypt. Miscellaneous: * In command line tools, no longer support -? for requesting help, since using it without shell quoting is a dangerous habit. Use long option --help instead. The shared library names are libnettle.so.4.1 and libhogweed.so.2.1, with sonames libnettle.so.4 and libhogweed.so.2. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.2.tar.gz ftp://ftp.gnu.org/gnu/nettle/nettle-2.2.tar.gz Happy hacking, /Niels Möller -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs