![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / security / botan-devel
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.25, Fri Apr 1 08:07:29 2022 UTC (14 months ago) by wiz
Branch: MAIN
CVS Tags: HEAD
Changes since 1.24: +1 -1
lines
FILE REMOVED
*: finish move of botan to versioned directories
Revision 1.24 / (download) - annotate - [select for diffs], Thu Mar 31 23:30:16 2022 UTC (14 months ago) by wiz
Branch: MAIN
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored)
*: recursive bump for botan-devel shlib bump
Revision 1.23 / (download) - annotate - [select for diffs], Mon Jan 10 01:46:43 2022 UTC (16 months, 3 weeks ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2022Q1-base,
pkgsrc-2022Q1
Changes since 1.22: +2 -2
lines
Diff to previous 1.22 (colored)
*: Recursive revbump from boost 1.78.0
Revision 1.22 / (download) - annotate - [select for diffs], Wed Sep 29 19:00:12 2021 UTC (20 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.21: +2 -2
lines
Diff to previous 1.21 (colored)
revbump for boost-libs
Revision 1.21 / (download) - annotate - [select for diffs], Wed Apr 21 13:24:15 2021 UTC (2 years, 1 month ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3,
pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.20: +2 -2
lines
Diff to previous 1.20 (colored)
revbump for boost-libs
Revision 1.20 / (download) - annotate - [select for diffs], Fri Jan 1 08:24:55 2021 UTC (2 years, 5 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1
Changes since 1.19: +2 -2
lines
Diff to previous 1.19 (colored)
*: Recursive revbump from boost-1.75.0
Revision 1.19 / (download) - annotate - [select for diffs], Wed May 6 14:04:12 2020 UTC (3 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2020Q4-base,
pkgsrc-2020Q4,
pkgsrc-2020Q3-base,
pkgsrc-2020Q3,
pkgsrc-2020Q2-base,
pkgsrc-2020Q2
Changes since 1.18: +2 -2
lines
Diff to previous 1.18 (colored)
revbump after boost update
Revision 1.18 / (download) - annotate - [select for diffs], Sun Jan 12 20:19:58 2020 UTC (3 years, 4 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.17: +2 -2
lines
Diff to previous 1.17 (colored)
*: Recursive revbump from devel/boost-libs
Revision 1.17 / (download) - annotate - [select for diffs], Thu Aug 22 12:23:43 2019 UTC (3 years, 9 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4,
pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.16: +2 -2
lines
Diff to previous 1.16 (colored)
Recursive revbump from boost-1.71.0
Revision 1.16 / (download) - annotate - [select for diffs], Mon Jul 15 18:43:54 2019 UTC (3 years, 10 months ago) by bsiegert
Branch: MAIN
Changes since 1.15: +3 -3
lines
Diff to previous 1.15 (colored)
botan-devel: bump buildlink dependency version.
Revision 1.15 / (download) - annotate - [select for diffs], Mon Jul 1 04:07:51 2019 UTC (3 years, 11 months ago) by ryoon
Branch: MAIN
Changes since 1.14: +2 -2
lines
Diff to previous 1.14 (colored)
Recursive revbump from boost-1.70.0
Revision 1.14 / (download) - annotate - [select for diffs], Thu Dec 13 19:51:36 2018 UTC (4 years, 5 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2,
pkgsrc-2019Q1-base,
pkgsrc-2019Q1,
pkgsrc-2018Q4-base,
pkgsrc-2018Q4
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored)
revbump for boost 1.69.0
Revision 1.13 / (download) - annotate - [select for diffs], Thu Aug 16 18:54:31 2018 UTC (4 years, 9 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.12: +2 -2
lines
Diff to previous 1.12 (colored)
revbump after boost-libs update
Revision 1.12 / (download) - annotate - [select for diffs], Sun Apr 29 21:31:22 2018 UTC (5 years, 1 month ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2
Changes since 1.11: +2 -2
lines
Diff to previous 1.11 (colored)
revbump for boost-libs update
Revision 1.11 / (download) - annotate - [select for diffs], Mon Jan 1 21:18:10 2018 UTC (5 years, 5 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base,
pkgsrc-2018Q1
Changes since 1.10: +2 -2
lines
Diff to previous 1.10 (colored)
Revbump after boost update
Revision 1.10 / (download) - annotate - [select for diffs], Thu Aug 24 20:03:00 2017 UTC (5 years, 9 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3
Changes since 1.9: +2 -2
lines
Diff to previous 1.9 (colored)
Revbump for boost update
Revision 1.9 / (download) - annotate - [select for diffs], Sun Apr 30 01:21:24 2017 UTC (6 years, 1 month ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base,
pkgsrc-2017Q2
Changes since 1.8: +2 -1
lines
Diff to previous 1.8 (colored)
Recursive revbump from boost update
Revision 1.8 / (download) - annotate - [select for diffs], Mon Apr 10 21:14:45 2017 UTC (6 years, 1 month ago) by joerg
Branch: MAIN
Changes since 1.7: +2 -3
lines
Diff to previous 1.7 (colored)
Update to Botan 2.1.0, the new stable branch. Some of the more important changes: - Fix incorrect truncation in Bcrypt. Passwords in length between 56 and 72 characters were truncated at 56 characters. Found and reported by Solar Designer. (CVE-2017-7252) (GH #938) - Fix a bug in X509 DN string comparisons that could result in out of bound reads. This could result in information leakage, denial of service, or potentially incorrect certificate validation results. Found independently by Cisco Talos team and OSS-Fuzz. (CVE-2017-2801) - Correct minimum work factor for Bcrypt password hashes. All other implementations require the work factor be at least 4. Previously Botan simply required it be greater than zero. (GH #938) - Converge on a single side channel silent EC blinded multiply algorithm. Uses Montgomery ladder with order/2 bits scalar blinding and point randomization now by default. (GH #893) - Add ability to search for certificates using the SHA-256 of the distinguished name. (GH #900) - Support a 0-length IV in ChaCha stream cipher. Such an IV is treated identically to an 8-byte IV of all zeros. - Previously Botan forbid any use of times past 2037 to avoid Y2038 issues. Now this restriction is only in place on systems which have a 32-bit time_t. (GH #933 fixing #917) - Fix a longstanding bug in modular exponentiation which caused most exponentiations modulo an even number to have an incorrect result; such moduli occur only rarely in cryptographic contexts. (GH #754) - Fix a bug in BigInt multiply operation, introduced in 1.11.30, which could cause incorrect results. Found by OSS-Fuzz fuzzing the ressol function, where the bug manifested as an incorrect modular exponentiation. OSS-Fuzz bug #287 - Fix a bug that meant the ãà×Êetf/modp/6144ãàand ãà×Êetf/modp/8192ãà discrete log groups used an incorrect value for the generator, specifically the value (p-1)/2 was used instead of the correct value of 2. - DL_Group strong generation previously set the generator to 2. However sometimes 2 generates the entire group mod p, rather than the subgroup mod q. This is invalid by X9.42 standard, and exposes incautious applications to small subgroup attacks. Now DL_Group uses the smallest g which is a quadratic residue. (GH #818) - The default TLS policy now requires 2048 or larger DH groups by default. - The default Path_Validation_Restrictions constructor has changed to require at least 110 bit signature strength. This means 1024 bit RSA certificates and also SHA-1 certificates are rejected by default. Both settings were already the default for certificate validation in TLS handshake, but this changes it for applications also. - Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132) - Add post-quantum signature scheme XMSS. Provides either 128 or 256 bit (post-quantum) security, with small public and private keys, fast verification, and reasonably small signatures (2500 bytes for 128-bit security). Signature generation is very slow, on the order of seconds. And very importantly the signature scheme is stateful: each leaf index must only be used once, or all security is lost. In the appropriate system where signatures are rarely generated (such as code signing) XMSS makes an excellent choice. (GH #717 #736) - Add support for client-side OCSP stapling to TLS. (GH #738) - Previously both public and private keys performed automatic self testing after generation or loading. However this often caused unexpected application performance problems, and so has been removed. Instead applications must call check_key explicitly. (GH #704) - Fix TLS session resumption bugs which caused resumption failures if an application used a single session cache for both TLS and DTLS. (GH #688) - The default TLS policy now disables static RSA ciphersuites, all DSA ciphersuites, and the AES CCM-8 ciphersuites. Disabling static RSA by default protects servers from oracle attacks, as well as enforcing a forward secure ciphersuite. Some applications may be forced to re-enable RSA for interop reasons. DSA and CCM-8 are rarely used, and likely should not be negotiated outside of special circumstances. - The default TLS policy now prefers ChaCha20Poly1305 cipher over any AES mode. - The default TLS policy now orders ECC curve preferences in order by performance, with x25519 first, then P-256, then P-521, then the rest.
Revision 1.7 / (download) - annotate - [select for diffs], Sun Jan 1 16:05:59 2017 UTC (6 years, 5 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base,
pkgsrc-2017Q1
Changes since 1.6: +2 -2
lines
Diff to previous 1.6 (colored)
Revbump after boost update
Revision 1.6 / (download) - annotate - [select for diffs], Fri Nov 11 19:49:06 2016 UTC (6 years, 6 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base,
pkgsrc-2016Q4
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored)
Bump ABI version for major bump.
Revision 1.5 / (download) - annotate - [select for diffs], Fri Oct 7 18:25:33 2016 UTC (6 years, 7 months ago) by adam
Branch: MAIN
Changes since 1.4: +2 -2
lines
Diff to previous 1.4 (colored)
Revbump post boost update
Revision 1.4 / (download) - annotate - [select for diffs], Fri Apr 17 15:52:57 2015 UTC (8 years, 1 month ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2016Q3-base,
pkgsrc-2016Q3,
pkgsrc-2016Q2-base,
pkgsrc-2016Q2,
pkgsrc-2016Q1-base,
pkgsrc-2016Q1,
pkgsrc-2015Q4-base,
pkgsrc-2015Q4,
pkgsrc-2015Q3-base,
pkgsrc-2015Q3,
pkgsrc-2015Q2-base,
pkgsrc-2015Q2
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored)
Revbump after updating devel/boost-libs
Revision 1.3 / (download) - annotate - [select for diffs], Fri Nov 7 19:39:25 2014 UTC (8 years, 6 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base,
pkgsrc-2015Q1,
pkgsrc-2014Q4-base,
pkgsrc-2014Q4
Changes since 1.2: +2 -2
lines
Diff to previous 1.2 (colored)
Revbump after updating boost
Revision 1.2 / (download) - annotate - [select for diffs], Wed Aug 13 10:57:32 2014 UTC (8 years, 9 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2014Q3-base,
pkgsrc-2014Q3
Changes since 1.1: +2 -1
lines
Diff to previous 1.1 (colored)
Revbump after boost-libs update
Revision 1.1 / (download) - annotate - [select for diffs], Mon Feb 24 20:49:14 2014 UTC (9 years, 3 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2014Q2-base,
pkgsrc-2014Q2,
pkgsrc-2014Q1-base,
pkgsrc-2014Q1
Add botan 1.11.8, the in-progress version of security/botan. It brings a heavily changed x509 instructure and TLS support on top.