[pkgsrc/trunk]: pkgsrc/security/nettle nettle: update to 3.8.

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/88f7a3ac5b6b
branches:  trunk
changeset: 381239:88f7a3ac5b6b
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Sun Jul 03 09:46:45 2022 +0000

description:
nettle: update to 3.8.

NEWS for the Nettle 3.8 release

        This release includes a couple of new features, and many
        performance improvements. It adds assembly code for two more
        architectures: ARM64 and S390x.

        The new version is intended to be fully source and binary
        compatible with Nettle-3.6. The shared library names are
        libnettle.so.8.5 and libhogweed.so.6.5, with sonames
        libnettle.so.8 and libhogweed.so.6.

        New features:

        * AES keywrap (RFC 3394), contributed by Nicolas Mora.

        * SM3 hash function, contributed by Tianjia Zhang.

        * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
          cbc_aes256_encrypt.

          On processors where AES is fast enough, e.g., x86_64 with
          aesni instructions, the overhead of using Nettle's general
          cbc_encrypt can be significant. The new functions can be
          implemented in assembly, to do multiple blocks with reduced
          per-block overhead.

          Note that there's no corresponding new decrypt functions,
          since the general cbc_decrypt doesn't suffer from the same
          performance problem.

        Bug fixes:

        * Fix fat builds for x86_64 windows, these appear to never
          have worked.

        Optimizations:

        * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
          SHA256, for processors supporting crypto extensions. Great
          speedups, and fat builds are supported. Contributed by
          Mamone Tarsha.

        * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
          SHA256, SHA512 and SHA3. Great speedups, and fat builds are
          supported. Contributed by Mamone Tarsha.

        * New PPC64 assembly for ecc modulo/redc operations,
          contributed by Amitay Isaacs, Martin Schwenke and Alastair
          D´Silva.

        * The x86_64 AES implementation using aesni instructions has
          been reorganized with one separate function per key size,
          each interleaving the processing of two blocks at a time
          (when the caller processes multiple blocks with each call).
          This gives a modest performance improvement on some
          processors.

        * Rewritten and faster x86_64 poly1305 assembly.

        Known issues:

        * Nettle's testsuite doesn't work out-of-the-box on recent
          MacOS, due to /bin/sh discarding the DYLD_LIBRARY_PATH
          environment variable. Nettle's test scripts handle this in
          some cases, but currently fails the test cases that are
          themselves written as /bin/sh scripts. As a workaround, use

          make check EMULATOR='env DYLD_LIBRARY_PATH=$(TEST_SHLIB_DIR)'

        Miscellaneous:

        * Updated manual to current makeinfo conventions, with no
          explicit node pointers. Generate pdf version with texi2pdf,
          to get working hyper links.

        * Added square root functions for NIST ecc curves, as a
          preparation for supporting compact point representation.

        * Reworked internal GCM/ghash interfaces, simplifying assembly
          implementations. Deleted unused GCM C implementation
          variants with less than 8-bit lookup table.

diffstat:

 security/nettle/Makefile                  |   4 ++--
 security/nettle/PLIST                     |   4 +++-
 security/nettle/distinfo                  |  10 +++++-----
 security/nettle/patches/patch-Makefile.in |  12 ++++++------
 4 files changed, 16 insertions(+), 14 deletions(-)

diffs (92 lines):

diff -r b5bc914cb9de -r 88f7a3ac5b6b security/nettle/Makefile
--- a/security/nettle/Makefile  Sun Jul 03 09:44:22 2022 +0000
+++ b/security/nettle/Makefile  Sun Jul 03 09:46:45 2022 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2021/06/07 18:57:58 adam Exp $
+# $NetBSD: Makefile,v 1.28 2022/07/03 09:46:45 wiz Exp $
 
-DISTNAME=      nettle-3.7.3
+DISTNAME=      nettle-3.8
 CATEGORIES=    devel security
 MASTER_SITES=  http://www.lysator.liu.se/~nisse/archive/
 MASTER_SITES+= ftp://ftp.lysator.liu.se/pub/security/lsh/
diff -r b5bc914cb9de -r 88f7a3ac5b6b security/nettle/PLIST
--- a/security/nettle/PLIST     Sun Jul 03 09:44:22 2022 +0000
+++ b/security/nettle/PLIST     Sun Jul 03 09:46:45 2022 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2021/02/18 10:59:09 adam Exp $
+@comment $NetBSD: PLIST,v 1.12 2022/07/03 09:46:45 wiz Exp $
 bin/nettle-hash
 bin/nettle-lfib-stream
 bin/nettle-pbkdf2
@@ -47,6 +47,7 @@
 include/nettle/memxor.h
 include/nettle/nettle-meta.h
 include/nettle/nettle-types.h
+include/nettle/nist-keywrap.h
 include/nettle/pbkdf2.h
 include/nettle/pgp.h
 include/nettle/pkcs1.h
@@ -64,6 +65,7 @@
 include/nettle/sha2.h
 include/nettle/sha3.h
 include/nettle/siv-cmac.h
+include/nettle/sm3.h
 include/nettle/streebog.h
 include/nettle/twofish.h
 include/nettle/umac.h
diff -r b5bc914cb9de -r 88f7a3ac5b6b security/nettle/distinfo
--- a/security/nettle/distinfo  Sun Jul 03 09:44:22 2022 +0000
+++ b/security/nettle/distinfo  Sun Jul 03 09:46:45 2022 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.24 2021/10/26 11:17:20 nia Exp $
+$NetBSD: distinfo,v 1.25 2022/07/03 09:46:45 wiz Exp $
 
-BLAKE2s (nettle-3.7.3.tar.gz) = 2313111d9b04f0c83813c28453ad2d5ff1dcdf838a8d0a4a3b9df47528cb0cef
-SHA512 (nettle-3.7.3.tar.gz) = 9901eba305421adff6d551ac7f478dff3f68a339d444c776724ab0b977fe6be792b1d2950c8705acbe76bd924fd6d898a65eded546777884be3b436d0e052437
-Size (nettle-3.7.3.tar.gz) = 2383985 bytes
-SHA1 (patch-Makefile.in) = ddc92dc4343df2723fbbfd1ef1afc01f1d576b09
+BLAKE2s (nettle-3.8.tar.gz) = 8c87920ac9f8acd88fecb85db0cbf4c112a34dc16aa3484b897d6a9ce5c1338b
+SHA512 (nettle-3.8.tar.gz) = af3a910bd661ed9691b1bd66b0f8147aaebdc92ae6ab47640675df263409ecb8d25f0403fcc7dc6471264b9df0a47c025244404f0691ef58c133762f64b67610
+Size (nettle-3.8.tar.gz) = 2404258 bytes
+SHA1 (patch-Makefile.in) = 7c8d89af674e27e63af6fdad1d72f22f02b21709
 SHA1 (patch-aa) = 2332668b077a6e3a1add603c87f60167755554ec
 SHA1 (patch-config.make.in) = 708fb3cac9c44825e0d231541cbecade2239c850
 SHA1 (patch-testsuite_Makefile.in) = 6e530041b753336b3eff745e0b05b3b382baec0c
diff -r b5bc914cb9de -r 88f7a3ac5b6b security/nettle/patches/patch-Makefile.in
--- a/security/nettle/patches/patch-Makefile.in Sun Jul 03 09:44:22 2022 +0000
+++ b/security/nettle/patches/patch-Makefile.in Sun Jul 03 09:46:45 2022 +0000
@@ -1,19 +1,19 @@
-$NetBSD: patch-Makefile.in,v 1.9 2021/02/18 10:59:09 adam Exp $
+$NetBSD: patch-Makefile.in,v 1.10 2022/07/03 09:46:45 wiz Exp $
 
 Use LIBTOOL.
 
---- Makefile.in.orig   2021-02-17 18:02:32.000000000 +0000
+--- Makefile.in.orig   2022-06-02 17:57:16.000000000 +0000
 +++ Makefile.in
-@@ -27,7 +27,7 @@ PRE_CPPFLAGS = -I.
+@@ -26,7 +26,7 @@ include config.make
+ PRE_CPPFLAGS = -I.
  EXTRA_CFLAGS = $(CCPIC)
  
- # FIXME: Add configuration of LIBEXT?
 -LIBTARGETS = @IF_STATIC@ libnettle.a @IF_HOGWEED@ libhogweed.a
 +LIBTARGETS = @IF_STATIC@ libnettle.la @IF_HOGWEED@ libhogweed.la
  SHLIBTARGETS = @IF_SHARED@ $(LIBNETTLE_FORLINK) @IF_HOGWEED@ $(LIBHOGWEED_FORLINK)
  
  getopt_SOURCES = getopt.c getopt1.c
-@@ -277,24 +277,24 @@ nettle_OBJS = $(nettle_SOURCES:.c=.$(OBJ
+@@ -276,24 +276,24 @@ nettle_OBJS = $(nettle_SOURCES:.c=.$(OBJ
  hogweed_OBJS = $(hogweed_SOURCES:.c=.$(OBJEXT)) \
               $(OPT_HOGWEED_OBJS) @IF_MINI_GMP@ mini-gmp.$(OBJEXT)
  
@@ -48,7 +48,7 @@
        && $(DEP_PROCESS)
  
  # Rules building shared libraries.
-@@ -494,7 +494,7 @@ install-here: install-doc install-header
+@@ -484,7 +484,7 @@ install-here: install-doc install-header
  install-static: $(LIBTARGETS)
        $(MKDIR_P) $(DESTDIR)$(libdir)
        for f in $(LIBTARGETS); do \