CVS commit: pkgsrc/security/nettle

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Jul  3 09:46:45 UTC 2022

Modified Files:
        pkgsrc/security/nettle: Makefile PLIST distinfo
        pkgsrc/security/nettle/patches: patch-Makefile.in

Log Message:
nettle: update to 3.8.

NEWS for the Nettle 3.8 release

        This release includes a couple of new features, and many
        performance improvements. It adds assembly code for two more
        architectures: ARM64 and S390x.

        The new version is intended to be fully source and binary
        compatible with Nettle-3.6. The shared library names are
        libnettle.so.8.5 and libhogweed.so.6.5, with sonames
        libnettle.so.8 and libhogweed.so.6.

        New features:

        * AES keywrap (RFC 3394), contributed by Nicolas Mora.

        * SM3 hash function, contributed by Tianjia Zhang.

        * New functions cbc_aes128_encrypt, cbc_aes192_encrypt,
          cbc_aes256_encrypt.

          On processors where AES is fast enough, e.g., x86_64 with
          aesni instructions, the overhead of using Nettle's general
          cbc_encrypt can be significant. The new functions can be
          implemented in assembly, to do multiple blocks with reduced
          per-block overhead.

          Note that there's no corresponding new decrypt functions,
          since the general cbc_decrypt doesn't suffer from the same
          performance problem.

        Bug fixes:

        * Fix fat builds for x86_64 windows, these appear to never
          have worked.

        Optimizations:

        * New ARM64 implementation of AES, GCM, Chacha, SHA1 and
          SHA256, for processors supporting crypto extensions. Great
          speedups, and fat builds are supported. Contributed by
          Mamone Tarsha.

        * New s390x implementation of AES, GCM, Chacha, memxor, SHA1,
          SHA256, SHA512 and SHA3. Great speedups, and fat builds are
          supported. Contributed by Mamone Tarsha.

        * New PPC64 assembly for ecc modulo/redc operations,
          contributed by Amitay Isaacs, Martin Schwenke and Alastair
          D´Silva.

        * The x86_64 AES implementation using aesni instructions has
          been reorganized with one separate function per key size,
          each interleaving the processing of two blocks at a time
          (when the caller processes multiple blocks with each call).
          This gives a modest performance improvement on some
          processors.

        * Rewritten and faster x86_64 poly1305 assembly.

        Known issues:

        * Nettle's testsuite doesn't work out-of-the-box on recent
          MacOS, due to /bin/sh discarding the DYLD_LIBRARY_PATH
          environment variable. Nettle's test scripts handle this in
          some cases, but currently fails the test cases that are
          themselves written as /bin/sh scripts. As a workaround, use

          make check EMULATOR='env DYLD_LIBRARY_PATH=$(TEST_SHLIB_DIR)'

        Miscellaneous:

        * Updated manual to current makeinfo conventions, with no
          explicit node pointers. Generate pdf version with texi2pdf,
          to get working hyper links.

        * Added square root functions for NIST ecc curves, as a
          preparation for supporting compact point representation.

        * Reworked internal GCM/ghash interfaces, simplifying assembly
          implementations. Deleted unused GCM C implementation
          variants with less than 8-bit lookup table.


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/security/nettle/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/nettle/PLIST
cvs rdiff -u -r1.24 -r1.25 pkgsrc/security/nettle/distinfo
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/nettle/patches/patch-Makefile.in

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/nettle/Makefile
diff -u pkgsrc/security/nettle/Makefile:1.27 pkgsrc/security/nettle/Makefile:1.28
--- pkgsrc/security/nettle/Makefile:1.27        Mon Jun  7 18:57:58 2021
+++ pkgsrc/security/nettle/Makefile     Sun Jul  3 09:46:45 2022
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2021/06/07 18:57:58 adam Exp $
+# $NetBSD: Makefile,v 1.28 2022/07/03 09:46:45 wiz Exp $
 
-DISTNAME=      nettle-3.7.3
+DISTNAME=      nettle-3.8
 CATEGORIES=    devel security
 MASTER_SITES=  http://www.lysator.liu.se/~nisse/archive/
 MASTER_SITES+= ftp://ftp.lysator.liu.se/pub/security/lsh/

Index: pkgsrc/security/nettle/PLIST
diff -u pkgsrc/security/nettle/PLIST:1.11 pkgsrc/security/nettle/PLIST:1.12
--- pkgsrc/security/nettle/PLIST:1.11   Thu Feb 18 10:59:09 2021
+++ pkgsrc/security/nettle/PLIST        Sun Jul  3 09:46:45 2022
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2021/02/18 10:59:09 adam Exp $
+@comment $NetBSD: PLIST,v 1.12 2022/07/03 09:46:45 wiz Exp $
 bin/nettle-hash
 bin/nettle-lfib-stream
 bin/nettle-pbkdf2
@@ -47,6 +47,7 @@ include/nettle/memops.h
 include/nettle/memxor.h
 include/nettle/nettle-meta.h
 include/nettle/nettle-types.h
+include/nettle/nist-keywrap.h
 include/nettle/pbkdf2.h
 include/nettle/pgp.h
 include/nettle/pkcs1.h
@@ -64,6 +65,7 @@ include/nettle/sha1.h
 include/nettle/sha2.h
 include/nettle/sha3.h
 include/nettle/siv-cmac.h
+include/nettle/sm3.h
 include/nettle/streebog.h
 include/nettle/twofish.h
 include/nettle/umac.h

Index: pkgsrc/security/nettle/distinfo
diff -u pkgsrc/security/nettle/distinfo:1.24 pkgsrc/security/nettle/distinfo:1.25
--- pkgsrc/security/nettle/distinfo:1.24        Tue Oct 26 11:17:20 2021
+++ pkgsrc/security/nettle/distinfo     Sun Jul  3 09:46:45 2022
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.24 2021/10/26 11:17:20 nia Exp $
+$NetBSD: distinfo,v 1.25 2022/07/03 09:46:45 wiz Exp $
 
-BLAKE2s (nettle-3.7.3.tar.gz) = 2313111d9b04f0c83813c28453ad2d5ff1dcdf838a8d0a4a3b9df47528cb0cef
-SHA512 (nettle-3.7.3.tar.gz) = 9901eba305421adff6d551ac7f478dff3f68a339d444c776724ab0b977fe6be792b1d2950c8705acbe76bd924fd6d898a65eded546777884be3b436d0e052437
-Size (nettle-3.7.3.tar.gz) = 2383985 bytes
-SHA1 (patch-Makefile.in) = ddc92dc4343df2723fbbfd1ef1afc01f1d576b09
+BLAKE2s (nettle-3.8.tar.gz) = 8c87920ac9f8acd88fecb85db0cbf4c112a34dc16aa3484b897d6a9ce5c1338b
+SHA512 (nettle-3.8.tar.gz) = af3a910bd661ed9691b1bd66b0f8147aaebdc92ae6ab47640675df263409ecb8d25f0403fcc7dc6471264b9df0a47c025244404f0691ef58c133762f64b67610
+Size (nettle-3.8.tar.gz) = 2404258 bytes
+SHA1 (patch-Makefile.in) = 7c8d89af674e27e63af6fdad1d72f22f02b21709
 SHA1 (patch-aa) = 2332668b077a6e3a1add603c87f60167755554ec
 SHA1 (patch-config.make.in) = 708fb3cac9c44825e0d231541cbecade2239c850
 SHA1 (patch-testsuite_Makefile.in) = 6e530041b753336b3eff745e0b05b3b382baec0c

Index: pkgsrc/security/nettle/patches/patch-Makefile.in
diff -u pkgsrc/security/nettle/patches/patch-Makefile.in:1.9 pkgsrc/security/nettle/patches/patch-Makefile.in:1.10
--- pkgsrc/security/nettle/patches/patch-Makefile.in:1.9        Thu Feb 18 10:59:09 2021
+++ pkgsrc/security/nettle/patches/patch-Makefile.in    Sun Jul  3 09:46:45 2022
@@ -1,19 +1,19 @@
-$NetBSD: patch-Makefile.in,v 1.9 2021/02/18 10:59:09 adam Exp $
+$NetBSD: patch-Makefile.in,v 1.10 2022/07/03 09:46:45 wiz Exp $
 
 Use LIBTOOL.
 
---- Makefile.in.orig   2021-02-17 18:02:32.000000000 +0000
+--- Makefile.in.orig   2022-06-02 17:57:16.000000000 +0000
 +++ Makefile.in
-@@ -27,7 +27,7 @@ PRE_CPPFLAGS = -I.
+@@ -26,7 +26,7 @@ include config.make
+ PRE_CPPFLAGS = -I.
  EXTRA_CFLAGS = $(CCPIC)
  
- # FIXME: Add configuration of LIBEXT?
 -LIBTARGETS = @IF_STATIC@ libnettle.a @IF_HOGWEED@ libhogweed.a
 +LIBTARGETS = @IF_STATIC@ libnettle.la @IF_HOGWEED@ libhogweed.la
  SHLIBTARGETS = @IF_SHARED@ $(LIBNETTLE_FORLINK) @IF_HOGWEED@ $(LIBHOGWEED_FORLINK)
  
  getopt_SOURCES = getopt.c getopt1.c
-@@ -277,24 +277,24 @@ nettle_OBJS = $(nettle_SOURCES:.c=.$(OBJ
+@@ -276,24 +276,24 @@ nettle_OBJS = $(nettle_SOURCES:.c=.$(OBJ
  hogweed_OBJS = $(hogweed_SOURCES:.c=.$(OBJEXT)) \
               $(OPT_HOGWEED_OBJS) @IF_MINI_GMP@ mini-gmp.$(OBJEXT)
  
@@ -48,7 +48,7 @@ Use LIBTOOL.
        && $(DEP_PROCESS)
  
  # Rules building shared libraries.
-@@ -494,7 +494,7 @@ install-here: install-doc install-header
+@@ -484,7 +484,7 @@ install-here: install-doc install-header
  install-static: $(LIBTARGETS)
        $(MKDIR_P) $(DESTDIR)$(libdir)
        for f in $(LIBTARGETS); do \