Hi Everyone,

Here's an update on Crypto++ 5.6.3 and 5.7/6.0.

Crypto++ 5.6.3 is a minimal set of changes which attempts to honor 
versioning requirements. The versioning requirements are tricky because 
some of the Sanitizer and Valgrind findings that have been remediated break 
versioning. I'm beginning to think we are going to have to pick a poison...

Crypto++ 5.7/6.0 is a more complete set of changes. Its not clear what the 
version number will be because we have to take it modulo versioning 
requirements. Because 5.7 changes some publicly exported symbols, I believe 
that effectively means it needs to be 6.0 (even though it is, at its 
essence, a 5.7).

The major version bump of Crypto++ 5.7/6.0 should probably include the 
KeyDerivationParameters to avoid an immediate 7.0 bump. At the moment, it 
does not.

Looking to the future, once we get Crypto++ 6.0 + KeyDerivationParameters 
in place, we should be OK with minor bumps since its consistent with 
versioning requirements. For example, we can add the NIST DRBG from 
SP800-108, and then change the version to 6.1. Crypto++ 6.1 is fine because 
its compatible with 6.0 clients, and only adds new features.

Crypto++ 5.6.3 and 5.7/6.0 are testing OK on the major platforms. They are 
undergoing tests on the lesser platforms and compilers, like ARM, MIPS or 
OS X 10.5 with GCC 4.0. I know there's an outstanding issue on ARMEL at the 
moment.

As soon as we get the ARMEL issue resolved, I think we are going to offer 
5.6.3-rc0 and 6.0-rc0 for others to comment and test (or forever hold their 
peace). There's been mixed feelings on release candidate downloads. I think 
a good compromise is to keep them to a minimum because they need retained 
for historical purposes. The improved Download area of the website should 
facilitate retention requirements.

Jeff

-- 
-- 
You received this message because you are subscribed to the "Crypto++ Users" 
Google Group.
To unsubscribe, send an email to [email protected].
More information about Crypto++ and this group is available at 
http://www.cryptopp.com.
--- 
You received this message because you are subscribed to the Google Groups 
"Crypto++ Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to