Changelog for
libbotan-1_10-0-1.10.5-2.1.x86_64.rpm :
* Fri May 09 2014 tbehrensAATTsuse.com- add patch Botan-fix_miller_rabin_test.patch fix for unsafe Miller Rabin primality test, details: http://lists.randombit.net/pipermail/botan-devel/2014-April/001920.html
* Sat Mar 16 2013 cgiboudeauxAATTgmx.com- Update to 1.10.5
* A potential crash in the AES-NI implementation of the AES-192 key schedule (caused by misaligned loads) has been fixed.
* A previously conditional operation in Montgomery multiplication and squaring is now always performed, removing a possible timing channel.
* Sun Mar 10 2013 schwabAATTsuse.de- aarch64-support.patch: add support for aarch64
* Fri Sep 14 2012 p.drouandAATTgmail.com- update to 1.10.3:
* A change in 1.10.2 accidentally broke ABI compatibility with 1.10.1 and earlier versions, causing programs compiled against 1.10.1 to crash if linked with 1.10.2 at runtime.
* Recent versions of OpenSSL include extra information in ECC private keys, the presence of which caused an exception when such a key was loaded by botan. The decoding of ECC private keys has been changed to ignore these fields if they are set.- remove Botan-qt_thread_support.patch no needed anymore
* Thu Aug 16 2012 dmuellerAATTsuse.com- don\'t fiddle with march settings, we want the distro defaults (fixes build on ARM)
* Tue Feb 07 2012 cooloAATTsuse.com- little spec cleanup
* Fri Sep 16 2011 jengelhAATTmedozas.de- Implement baselibs.conf for package- Remove obsolete/redundant tags
* Mon Jul 04 2011 pthAATTsuse.de- Make package own its docdir.
* Thu Jun 23 2011 dmuellerAATTsuse.de- rename the devel package back to libbotan-devel as the main package allows to build only one -devel package
* Wed Jun 22 2011 pthAATTsuse.de- Fix Requires for devel package.
* Tue Jun 21 2011 pthAATTsuse.de- Devel package now is versioned so multiple devel packages may be installed in parallel.- Devel package renamed back to Botan-devel to keep rpmlint from thinking it is a library package ...- Update to 1.10.0: New Features:
* SSL (SSLv3, TLS 1.0, and TLS 1.1 are currently supported)
* GOST 34.10-2001 signature scheme (a Russian ECC signature standard analogous to ECDSA)
* The SHA-3 candidates Keccak and Blue Midnight Wish
* Bcrypt password hashing
* XSalsa20
* AES key wrapping
* Comb4P hash combinator. Other Changes:
* The block cipher interface now exposes any possible parallelism available to the implementation, and XTS, CTR, and CBC modes have been changed to use them.
* SIMD implementations of Serpent, XTEA, Noekeon, and IDEA have been added, as has an implementation of AES using SSSE3 which runs both in constant time and, on recent processors, significantly faster than the usual table based implementation. There have also been numerous optimizations to elliptic curves.
* The documentation, previously written in LaTeX, is now in reStructuredText, which is converted into HTML with Sphinx. This new format is significantly easier to write, encouraging more documentation to be written and updated. And, indeed, a number of features never before documented are now described in the manual.
* Wed Sep 01 2010 pthAATTsuse.de- Prefix last patch with Botan-.- Enable building of the qt_mutex module. This means that from now on libbotan requires libQtCore.- Fix test for thread/mutex support to also work for Qt4.- Update to 1.8.10:
* This release changes a number of aspects of how private keys are encrypted. The default encryption algorithm has changed from 3DES to AES-256
* The default iteration count for PBES1 and PBES2 encryption schemes (which are used primarily to encrypt asymmetric keys like RSA or DSA) has increased from 2048 to 10000, which should make brute force key cracking substantially harder.
* The first round of AES now uses a smaller set of lookup tables; this only reduces performance slightly but some timing and cache analysis attacks against AES are substantially harder when AES is implemented this way.
* The class known as S2K was renamed PBKDF in 1.9, with a typedef for backwards compatibility. For providing an equivalent forward compatibility path, 1.8.10 includes a typedef for PBKDF and a new accessor function get_pbkdf. It also includes a new interface for deriving keys with a passphrase which takes both the passphrase and desired output length as well as the salt and iteration count; in many cases this call is actually significantly more convenient than the older API.
* Tue Aug 31 2010 ajAATTsuse.de- Do not include build time and host in package to not trigger rebuilds.- Add pkg-config build requires as suggested by rpmlint.
* Wed Mar 10 2010 roAATTsuse.de- add patch from fedora to fix build on x86_64 (botan-1.8.8-binutils_lea_offset.patch)
* Sun Jan 10 2010 jengelhAATTmedozas.de- run configure with --cpu=%_target to have correct bitness selected for SPARC
* Mon Dec 21 2009 cooloAATTnovell.com- do not patch arch specific Makefiles, but simply pass WARN_FLAGS
* Sun Dec 20 2009 roAATTsuse.de- fix requires for devel package
* Wed Dec 16 2009 pthAATTsuse.de- Remove patches that aren\'t needed anymore.
* Fri Dec 11 2009 pthAATTsuse.de- Update to Botan-1.8.8: - Alter Skein-512 to match the tweaked 1.2 specification - Fix use of inline asm for access to x86 bswap function - Allow building the library without AES enabled - For the complete changes since 1.6.4 see log.txt in /usr/share/doc/packages/Botan.