The NetBSD Project

CVS log for pkgsrc/security/p5-Crypt-CBC/Makefile

[BACK] Up to [] / pkgsrc / security / p5-Crypt-CBC

Request diff between arbitrary revisions

Default branch: MAIN
Current tag: pkgsrc-2006Q1

Revision 1.20 / (download) - annotate - [select for diffs], Sun Mar 12 01:32:31 2006 UTC (13 years, 9 months ago) by heinz
Branch: MAIN
CVS Tags: pkgsrc-2006Q2-base, pkgsrc-2006Q2, pkgsrc-2006Q1-base, pkgsrc-2006Q1
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

Updated to version 2.17.

Pkgsrc changes:

Changes since version 2.15:
2.17    Mon Jan  9 18:22:51 EST 2006
        -IMPORTANT NOTE: Versions of this module prior to 2.17 were incorrectly
	using 8 byte IVs when generating the old-style RandomIV style header
	(as opposed to the new-style random salt header). This affects data
        encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
        and is a significant security issue.

        The bug has been corrected in versions 2.17 and higher by making it
        impossible to use 16-byte block ciphers with RandomIV headers. You may
        still read legacy encrypted data by explicitly passing the
        -insecure_legacy_decrypt option to Crypt::CBC->new().

        -The salt, iv and key are now reset before each complete encryption
         cycle. This avoids inadvertent reuse of the same salt.

        -A new -header option has been added that allows you to select
         among the various types of headers, and avoids the ambiguity
         of having multiple interacting options.

        -A new random_bytes() method provides access to /dev/urandom on
         suitably-equipped hardware.

2.16	Tue Dec  6 14:17:45 EST 2005
	- Added two new options to new():
	  -keysize   => <bytes>  Force the keysize -- useful for Blowfish
	  -blocksize => <bytes>  Force the blocksize -- not known to be useful

	  ("-keysize=>16" is necessary to decrypt OpenSSL messages encrypted
	  with Blowfish)

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

CVSweb <>