This is the mail archive of the
cygwin-announce
mailing list for the Cygwin project.
Updated: {nettle/libnettle4/libhogweed2/libnettle-devel}-2.7.1-1: A cryptographic library that is designed to fit easily in more or less any context
- From: Dr. Volker Zell <dr dot volker dot zell at oracle dot com>
- To: cygwin-announce at cygwin dot com
- Date: Sun, 13 Mar 2016 15:09:15 +0100
- Subject: Updated: {nettle/libnettle4/libhogweed2/libnettle-devel}-2.7.1-1: A cryptographic library that is designed to fit easily in more or less any context
- Authentication-results: sourceware.org; auth=none
- Reply-to: The Cygwin Mailing List <cygwin at cygwin dot com>
Hi
New versions of 'nettle/libnettle4/libhogweed2/libnettle-devel' have been uploaded to a server near you.
o Build for cygwin 2.4.1-1 with gcc-5.3.0-3
o Update to 2.7.1
o Fix for CVEs, see https://cygwin.com/ml/cygwin-apps/2016-03/msg00000.html
nettle NEWS:
============
* Fixed a bug in the new ECC code. The ecc_j_to_a function
called GMP:s mpn_mul_n (via ecc_modp_mul) with overlapping
input and output arguments, which is not supported.
* The assembly files for SHA1, SHA256 and AES depend on ARMv6
instructions, breaking nettle-2.7 for pre-v6 ARM processors.
The configure script now enables those assembly files only
when building for ARMv6 or later.
* Use a more portable C expression for rotations. The
previous version used the following "standard" expression
for 32-bit rotation:
(x << n) | (x >> (32 - n))
But this gives undefined behavior (according to the C
specification) for n = 0. The rotate expression is replaced
by the more portable:
(x << n) | (x >> ((-n)&31))
This change affects only CAST128, which uses non-constant
rotation counts. Unfortunately, the new expression is poorly
optimized by released versions of gcc, making CAST128 a bit
slower. This is being fixed by the gcc hackers, see
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=57157.
CYGWIN-ANNOUNCE UNSUBSCRIBE INFO
================================
If you want to unsubscribe from the cygwin-announce mailing list, please
use the automated form at:
http://cygwin.com/lists.html#subscribe-unsubscribe
If this does not work, then look at the "List-Unsubscribe: " tag in the
email header of this message. Send email to the address specified
there. It will be in the format:
cygwin-announce-unsubscribe-you=yourdomain.com <at> cygwin.com
If you need more information on unsubscribing, start reading here:
http://sourceware.org/lists.html#unsubscribe-simple
Please read *all* of the information on unsubscribing that is available
starting at this URL.