CVS commit: pkgsrc/security/oqs-provider

["Jan Schaumann" <jschauma%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   jschauma
Date:           Mon Jan  6 20:58:01 UTC 2025

Modified Files:
        pkgsrc/security/oqs-provider: Makefile distinfo

Log Message:
Update to 0.8.0

Deprecation notice

This is to notify users of Kyber and Dilithium (Round
3 version) to switch to the ML-KEM (FIPS 203 final
version) and ML-DSA (FIPS 204 final version),
respectively, as support for both will be removed with
the next release of oqsprovider.

Security considerations

CVE-2024-54137: The associated liboqs v0.12.0 release
fixed a bug in HQC decapsulation that leads to
incorrect shared secret value during decapsulation
when called with an invalid ciphertext. Thank you to
Célian Glénaz and Dahmun Goudarzi from Quarkslab for
identifying the issue.

What's New

In addition to improving testing, CI, and fixing
platform specific build issues this release of
oqs-provider:

Updates IANA code points for ML-KEM and changes
FrodoKEM code points.

Adds support for ML-DSA (FIPS 204 final version).

Adds support for context strings in OpenSSL versions
>= 3.2.

Updates the implementation of
draft-ietf-lamps-pq-composite-sigs from version 01 to
version 02.

Adds a SBOM template in the CycloneDX 1.6 format.

Adds support for DTLS 1.3 (pending support in
OpenSSL).


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/security/oqs-provider/Makefile
cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/oqs-provider/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/oqs-provider/Makefile
diff -u pkgsrc/security/oqs-provider/Makefile:1.5 pkgsrc/security/oqs-provider/Makefile:1.6
--- pkgsrc/security/oqs-provider/Makefile:1.5   Wed Oct 23 15:54:52 2024
+++ pkgsrc/security/oqs-provider/Makefile       Mon Jan  6 20:58:01 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.5 2024/10/23 15:54:52 jschauma Exp $
+# $NetBSD: Makefile,v 1.6 2025/01/06 20:58:01 jschauma Exp $
 
-VERSION=       0.7.0
-PKGREVISION=   2
+VERSION=       0.8.0
 DISTNAME=      oqs-provider-${VERSION}
 DIST_SUBDIR=   ${PKGNAME}
 CATEGORIES=    security

Index: pkgsrc/security/oqs-provider/distinfo
diff -u pkgsrc/security/oqs-provider/distinfo:1.4 pkgsrc/security/oqs-provider/distinfo:1.5
--- pkgsrc/security/oqs-provider/distinfo:1.4   Wed Oct 23 15:54:52 2024
+++ pkgsrc/security/oqs-provider/distinfo       Mon Jan  6 20:58:01 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.4 2024/10/23 15:54:52 jschauma Exp $
+$NetBSD: distinfo,v 1.5 2025/01/06 20:58:01 jschauma Exp $
 
-BLAKE2s (oqs-provider-0.7.0nb2/oqs-provider-0.7.0.tar.gz) = 807ef29b57f83189d3338c16f83b66bcaf2a005bf2e4db23b29d6302d94f5470
-SHA512 (oqs-provider-0.7.0nb2/oqs-provider-0.7.0.tar.gz) = b492810ef25d9b785dba855e659dc1ec38a22d4aa3b204eccb3418c04dec246432c18fd747e48a5cf2b8d5cd2f2245d54142cb6bda6be1e487def841de021c42
-Size (oqs-provider-0.7.0nb2/oqs-provider-0.7.0.tar.gz) = 208082 bytes
+BLAKE2s (oqs-provider-0.8.0/oqs-provider-0.8.0.tar.gz) = 8ca68ecb9dab272ab3dd3edb9d4f15efb1e8f94042a18a41299df9b83dc6d117
+SHA512 (oqs-provider-0.8.0/oqs-provider-0.8.0.tar.gz) = 4f8056cb2fbc2a8684e2046b12a65820605b472df565cb814340e59e72cdf1d4abc6b915d92771160f3805433a9e40e722ca833495e5f3d753b56384490ec9f9
+Size (oqs-provider-0.8.0/oqs-provider-0.8.0.tar.gz) = 222427 bytes