Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package liboqs for openSUSE:Factory checked in at 2023-06-13 16:11:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/liboqs (Old) and /work/SRC/openSUSE:Factory/.liboqs.new.15902 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "liboqs" Tue Jun 13 16:11:04 2023 rev:7 rq:1092834 version:0.8.0 Changes: -------- --- /work/SRC/openSUSE:Factory/liboqs/liboqs.changes 2023-03-29 23:28:14.403790472 +0200 +++ /work/SRC/openSUSE:Factory/.liboqs.new.15902/liboqs.changes 2023-06-13 16:11:05.379444533 +0200 @@ -1,0 +2,38 @@ +Thu Jun 8 07:14:12 UTC 2023 - Marcus Meissner <[email protected]> + +- updated to 0.8.0 + This release features many algorithm updates, including removal + of algorithms and variants no longer proceeding through NIST + standardization and updates to newer versions. See the detailed list + of algorithm updates below. + + Key encapsulation mechanisms: + + - BIKE: updated to Round 4 version. + - Kyber: 90s variants were removed. + - NTRU Prime: All variants were removed, except for sntrup761. + - Saber: removed. + + Digital signature schemes + + - Dilithium; AES variants were removed. + - Falcon: updated to the 2023-02-07 version. + - Picnic: removed. + - Rainbow: removed. + - SPHINCS+: updated to version 3.1; SPHINCS+-Haraka variants were removed; SPHINCS+-SHA256 and SPHINCS+-SHAKE variants were renamed + + Other changes + + - Add Cryptographic Bill of Materials (CBOM) + - Improve building on ARM platforms + - Improve performance when using OpenSSL 3 for symmetric cryptography + - Increment shared object library version + - New configure-time options for algorithm selections + - pkgconfig file now available + +- removed 0001-Add-support-for-powerpc64.-1160.patch: upstream +- 0002-Mark-stack-non-executable-when-compiling-with-clang-.patch: upstream + +- liboqs is now liboqs.so.3. + +------------------------------------------------------------------- Old: ---- 0.7.1.tar.gz 0001-Add-support-for-powerpc64.-1160.patch 0002-Mark-stack-non-executable-when-compiling-with-clang-.patch New: ---- 0.8.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ liboqs.spec ++++++ --- /var/tmp/diff_new_pack.4RjKuA/_old 2023-06-13 16:11:06.171449205 +0200 +++ /var/tmp/diff_new_pack.4RjKuA/_new 2023-06-13 16:11:06.175449229 +0200 @@ -17,7 +17,7 @@ Name: liboqs -Version: 0.7.1 +Version: 0.8.0 Release: 0 Summary: C library for quantum-resistant cryptographic algorithms License: MIT @@ -26,10 +26,7 @@ Source: https://github.com/open-quantum-safe/liboqs/archive/refs/tags/%{version}.tar.gz Source1: baselibs.conf Patch0: liboqs-fix-build.patch -# PATCH-FIX-UPSTREAM -Patch1: 0001-Add-support-for-powerpc64.-1160.patch -Patch2: 0002-Mark-stack-non-executable-when-compiling-with-clang-.patch -Patch3: liboqs-fix-prototypemismatch.patch +Patch1: liboqs-fix-prototypemismatch.patch BuildRequires: cmake BuildRequires: doxygen BuildRequires: libopenssl-devel @@ -38,18 +35,18 @@ liboqs is a C library for quantum-resistant cryptographic algorithms. See the bundled README.md for particular limitations on intended use. -%package -n liboqs0 +%package -n liboqs3 Summary: C library for quantum-resistant cryptographic algorithms Group: System/Libraries -%description -n liboqs0 +%description -n liboqs3 liboqs is a C library for quantum-resistant cryptographic algorithms. See the bundled README.md for particular limitations on intended use. %package devel Summary: Headers for liboqs, a library for quantum-resistant cryptography Group: Development/Languages/C and C++ -Requires: liboqs0 = %{version} +Requires: liboqs3 = %{version} %description devel liboqs is a C library for quantum-resistant cryptographic algorithms. @@ -75,18 +72,19 @@ # need to find out what cmake option is needed mv %{buildroot}%{_prefix}/local/* %{buildroot}%{_prefix} -if [ "%{_lib}" != "lib" ]; then - mv %{buildroot}%{_prefix}/lib %{buildroot}%{_libdir} -fi +#if [ "%{_lib}" != "lib" ]; then + # mv %{buildroot}%{_prefix}/lib %{buildroot}%{_libdir} +#fi rmdir %{buildroot}%{_prefix}/local/ -%post -n liboqs0 -p /sbin/ldconfig -%postun -n liboqs0 -p /sbin/ldconfig +%post -n liboqs3 -p /sbin/ldconfig +%postun -n liboqs3 -p /sbin/ldconfig -%files -n liboqs0 +%files -n liboqs3 %license LICENSE.txt -%{_libdir}/liboqs.so.0* +%{_libdir}/liboqs.so.0.8.0 +%{_libdir}/liboqs.so.3 %doc README.md %files devel @@ -94,9 +92,12 @@ %dir %{_includedir}/oqs %{_includedir}/oqs/* %{_libdir}/liboqs.so +%{_libdir}/pkgconfig/liboqs.pc %dir %{_libdir}/cmake/ %dir %{_libdir}/cmake/liboqs/ -%{_libdir}/cmake/liboqs/liboqsConfig-noconfig.cmake +%{_libdir}/cmake/liboqs/liboqsTargets-noconfig.cmake +%{_libdir}/cmake/liboqs/liboqsTargets.cmake %{_libdir}/cmake/liboqs/liboqsConfig.cmake +%{_libdir}/cmake/liboqs/liboqsConfigVersion.cmake %changelog ++++++ 0.7.1.tar.gz -> 0.8.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/liboqs/0.7.1.tar.gz /work/SRC/openSUSE:Factory/.liboqs.new.15902/0.8.0.tar.gz differ: char 12, line 1 ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.4RjKuA/_old 2023-06-13 16:11:06.223449512 +0200 +++ /var/tmp/diff_new_pack.4RjKuA/_new 2023-06-13 16:11:06.227449536 +0200 @@ -1,3 +1,3 @@ -liboqs0 +liboqs3 liboqs-devel ++++++ liboqs-fix-build.patch ++++++ --- /var/tmp/diff_new_pack.4RjKuA/_old 2023-06-13 16:11:06.239449606 +0200 +++ /var/tmp/diff_new_pack.4RjKuA/_new 2023-06-13 16:11:06.239449606 +0200 @@ -1,7 +1,7 @@ -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.h +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.h +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h @@ -30,12 +30,13 @@ #endif @@ -19,52 +19,10 @@ +int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]); #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.h -@@ -30,12 +30,13 @@ - #endif - - #define crypto_kem_keypair KYBER_NAMESPACE(keypair) --int crypto_kem_keypair(uint8_t *pk, uint8_t *sk); -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]); -+ - - #define crypto_kem_enc KYBER_NAMESPACE(enc) --int crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk); -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]); - - #define crypto_kem_dec KYBER_NAMESPACE(dec) --int crypto_kem_dec(uint8_t *ss, const uint8_t *ct, const uint8_t *sk); -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]); - - #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.h -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.h -@@ -30,12 +30,13 @@ - #endif - - #define crypto_kem_keypair KYBER_NAMESPACE(keypair) --int crypto_kem_keypair(uint8_t *pk, uint8_t *sk); -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]); -+ - - #define crypto_kem_enc KYBER_NAMESPACE(enc) --int crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk); -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]); - - #define crypto_kem_dec KYBER_NAMESPACE(dec) --int crypto_kem_dec(uint8_t *ss, const uint8_t *ct, const uint8_t *sk); -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]); - - #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.h @@ -30,12 +30,15 @@ #endif @@ -84,10 +42,10 @@ + #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.h +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.h +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h @@ -30,12 +30,14 @@ #endif @@ -106,140 +64,10 @@ +int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]); #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.h -@@ -30,12 +30,14 @@ - #endif - - #define crypto_kem_keypair KYBER_NAMESPACE(keypair) --int crypto_kem_keypair(uint8_t *pk, uint8_t *sk); -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]); -+ - - #define crypto_kem_enc KYBER_NAMESPACE(enc) --int crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk); -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]); -+ - - #define crypto_kem_dec KYBER_NAMESPACE(dec) --int crypto_kem_dec(uint8_t *ss, const uint8_t *ct, const uint8_t *sk); -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]); - - #endif -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c -@@ -20,8 +20,7 @@ - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_keypair(uint8_t *pk, -- uint8_t *sk) -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - indcpa_keypair(pk, sk); -@@ -48,9 +47,7 @@ int crypto_kem_keypair(uint8_t *pk, - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_enc(uint8_t *ct, -- uint8_t *ss, -- const uint8_t *pk) -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]) - { - uint8_t buf[2*KYBER_SYMBYTES]; - /* Will contain key, coins */ -@@ -91,9 +88,7 @@ int crypto_kem_enc(uint8_t *ct, - * - * On failure, ss will contain a pseudo-random value. - **************************************************/ --int crypto_kem_dec(uint8_t *ss, -- const uint8_t *ct, -- const uint8_t *sk) -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - int fail; -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c -@@ -20,8 +20,7 @@ - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_keypair(uint8_t *pk, -- uint8_t *sk) -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - indcpa_keypair(pk, sk); -@@ -48,9 +47,7 @@ int crypto_kem_keypair(uint8_t *pk, - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_enc(uint8_t *ct, -- uint8_t *ss, -- const uint8_t *pk) -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]) - { - uint8_t buf[2*KYBER_SYMBYTES]; - /* Will contain key, coins */ -@@ -91,9 +88,7 @@ int crypto_kem_enc(uint8_t *ct, - * - * On failure, ss will contain a pseudo-random value. - **************************************************/ --int crypto_kem_dec(uint8_t *ss, -- const uint8_t *ct, -- const uint8_t *sk) -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - int fail; -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c -=================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c -@@ -20,8 +20,7 @@ - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_keypair(uint8_t *pk, -- uint8_t *sk) -+int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES], uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - indcpa_keypair(pk, sk); -@@ -48,9 +47,7 @@ int crypto_kem_keypair(uint8_t *pk, - * - * Returns 0 (success) - **************************************************/ --int crypto_kem_enc(uint8_t *ct, -- uint8_t *ss, -- const uint8_t *pk) -+int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES], uint8_t ss[KYBER_SSBYTES], const uint8_t pk[KYBER_PUBLICKEYBYTES]) - { - uint8_t buf[2*KYBER_SYMBYTES]; - /* Will contain key, coins */ -@@ -91,9 +88,7 @@ int crypto_kem_enc(uint8_t *ct, - * - * On failure, ss will contain a pseudo-random value. - **************************************************/ --int crypto_kem_dec(uint8_t *ss, -- const uint8_t *ct, -- const uint8_t *sk) -+int crypto_kem_dec(uint8_t ss[KYBER_SSBYTES], const uint8_t ct[KYBER_CIPHERTEXTBYTES], const uint8_t sk[KYBER_SECRETKEYBYTES]) - { - size_t i; - int fail; -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.c +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber768-90s_ref/kem.c +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber512_ref/kem.c @@ -20,8 +20,7 @@ * * Returns 0 (success) @@ -272,10 +100,10 @@ { size_t i; int fail; -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.c +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber512-90s_ref/kem.c +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber768_ref/kem.c @@ -20,8 +20,7 @@ * * Returns 0 (success) @@ -308,10 +136,10 @@ { size_t i; int fail; -Index: liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.c +Index: liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c =================================================================== ---- liboqs-0.7.1.orig/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.c -+++ liboqs-0.7.1/src/kem/kyber/pqcrystals-kyber_kyber1024-90s_ref/kem.c +--- liboqs-0.8.0.orig/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c ++++ liboqs-0.8.0/src/kem/kyber/pqcrystals-kyber_kyber1024_ref/kem.c @@ -20,8 +20,7 @@ * * Returns 0 (success) ++++++ liboqs-fix-prototypemismatch.patch ++++++ --- /var/tmp/diff_new_pack.4RjKuA/_old 2023-06-13 16:11:06.251449677 +0200 +++ /var/tmp/diff_new_pack.4RjKuA/_new 2023-06-13 16:11:06.255449701 +0200 @@ -1,7 +1,7 @@ -Index: liboqs-0.7.1/src/kem/frodokem/kem_frodokem.h +Index: liboqs-0.8.0/src/kem/frodokem/kem_frodokem.h =================================================================== ---- liboqs-0.7.1.orig/src/kem/frodokem/kem_frodokem.h -+++ liboqs-0.7.1/src/kem/frodokem/kem_frodokem.h +--- liboqs-0.8.0.orig/src/kem/frodokem/kem_frodokem.h ++++ liboqs-0.8.0/src/kem/frodokem/kem_frodokem.h @@ -11,9 +11,9 @@ #define OQS_KEM_frodokem_640_aes_length_ciphertext 9720 #define OQS_KEM_frodokem_640_aes_length_shared_secret 16 @@ -15,24 +15,4 @@ #endif #ifdef OQS_ENABLE_KEM_frodokem_640_shake -Index: liboqs-0.7.1/.CMake/compiler_opts.cmake -=================================================================== ---- liboqs-0.7.1.orig/.CMake/compiler_opts.cmake -+++ liboqs-0.7.1/.CMake/compiler_opts.cmake -@@ -62,7 +62,6 @@ if(CMAKE_C_COMPILER_ID MATCHES "Clang|GN - endif() - - if(CMAKE_C_COMPILER_ID MATCHES "Clang") -- add_compile_options(-Werror) - add_compile_options(-Wall) - add_compile_options(-Wextra) - add_compile_options(-Wpedantic) -@@ -109,7 +108,6 @@ if(CMAKE_C_COMPILER_ID MATCHES "Clang") - endif() - - elseif(CMAKE_C_COMPILER_ID STREQUAL "GNU") -- add_compile_options(-Werror) - add_compile_options(-Wall) - add_compile_options(-Wextra) - add_compile_options(-Wpedantic)
