Changelog for
libgcrypt-1.10.0-10.el9_2.i686.rpm :
* Mon Mar 20 2023 Jakub Jelen
- 1.10.0-10- Provide FIPS indicators for MD and HMACs- Improve PCT tests for ECDSA and always run them after key is generated- Add missing guards for FIPS status in md_sign/verify function- Provider FIPS indicators for public key operation flags
* Tue Jan 24 2023 Jakub Jelen - 1.10.0-9- Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode- Do not allow large salt lengths with RSA-PSS padding- Disable X9.31 key generation in FIPS mode- Update the FIPS integrity checking code to upstream version- Update cipher modes FIPS indicators for AES WRAP and GCM- Disable jitter entropy generator
* Thu Oct 20 2022 Jakub Jelen - 1.10.0-8- Fix unneeded PBKDF2 passphrase length limitation in FIPS mode- Enforce HMAC key lengths in MD API in FIPS mode
* Thu Oct 06 2022 Jakub Jelen - 1.10.0-7- Properly enforce KDF limits in FIPS mode (#2130275)- Fix memory leak in large digest test (#2129150)- Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)- Skip RSA encryption/decryption selftest in FIPS mode (#2130275)
* Tue Sep 27 2022 Jakub Jelen - 1.10.0-6- Fix SHA3 digests with large inputs (#2129150)- Fix FIPS RSA PCT (#2128455)- Fix RSA FIPS Keygen that non-deterministically fails (#2130275)- Get max 32B from getrandom in FIPS mode (#2130275)
* Wed Aug 17 2022 Jakub Jelen - 1.10.0-5- Allow signature verification with smaller RSA keys (#2083846)- Allow short salt for KDF (#2114870)- Reseed the kernel DRBG by using GRND_RANDOM (#2118695)- Address FIPS review comments around selftests (#2118695)- Disable RSA-OAEP in FIPS mode (#2118695)
* Fri May 06 2022 Jakub Jelen - 1.10.0-4- Backport ppc hardware flags detection (#2051307)- Disable PKCS#1.5 encryption in FIPS mode (#2061328)
* Thu Mar 31 2022 Jakub Jelen - 1.10.0-3- Use correct FIPS module name (#2067123)
* Thu Feb 17 2022 Jakub Jelen - 1.10.0-2- Systematic FIPS module name with other FIPS modules
* Wed Feb 02 2022 Jakub Jelen - 1.10.0-1- Final release (#2026636)
* Thu Jan 27 2022 Jakub Jelen - 1.10.0-0.3- Fix broken soname in the previous beta
* Thu Jan 27 2022 Jakub Jelen - 1.10.0-0.2- Provide compat soname symlink as the new release is backward compatible
* Wed Jan 26 2022 Jakub Jelen - 1.10.0-0.1- New upstream pre-release (#2026636)- Upstream all patches- Implement FIPS 140-3 support
* Tue Oct 12 2021 Jakub Jelen - 1.9.3-5- Allow HW optimizations in FIPS mode (#1990059)
* Mon Aug 09 2021 Mohan Boddu - 1.9.3-4- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688
* Tue Jun 15 2021 Jakub Jelen - 1.9.3-3- Fix for CVE-2021-33560 (#1970098)
* Wed Apr 28 2021 Jakub Jelen - 1.9.3-2- Restore the CET protection (#1954049)
* Tue Apr 20 2021 Jakub Jelen - 1.9.3-1- New upstream release (#1951325)
* Fri Apr 16 2021 Mohan Boddu - 1.9.2-4- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Thu Apr 15 2021 Jakub Jelen - 1.9.2-3- Fix issues reported by coverity
* Mon Mar 29 2021 Jakub Jelen - 1.9.2-2- Fix OCB tag creation on s390x (failing gnupg2 tests)