Mailing List Archive

Libgcrypt 1.5.0 released
Hello!

The GNU project is pleased to announce the availability of Libgcrypt
version 1.5.0. This is the new stable version of Libgcrypt and upward
compatible with the 1.4 series.

The 1.4 series will enter end of life state on 2012-12-31.

Libgcrypt is a general purpose library of cryptographic building
blocks. It is originally based on code used by GnuPG. It does not
provide any implementation of OpenPGP or other protocols. Thorough
understanding of applied cryptography is required to use Libgcrypt.

Noteworthy changes between version 1.4.6 and 1.5.0:

* New function gcry_kdf_derive implementing OpenPGP S2K algorithms
and PBKDF2.

* Support for WindowsCE.

* Support for ECDH.

* Support for OAEP and PSS methods as described by RFC-3447.

* Fixed PKCS v1.5 code to always return the leading zero.

* New format specifiers "%M" and "%u" for gcry_sexp_build.

* Support opaque MPIs with "%m" and "%M" in gcry_sexp_build.

* New functions gcry_pk_get_curve and gcry_pk_get_param to map ECC
parameters to a curve name and to retrieve parameter values.

* gcry_mpi_cmp applied to opaque values has a defined semantic now.

* Uses the Intel AES-NI instructions if available.

* The use of the deprecated Alternative Public Key Interface
(gcry_ac_*) will now print compile time warnings.

* *The module register subsystem has been deprecated.* This
subsystem is not flexible enough and would always require ABI
changes to extend the internal interfaces. It will eventually be
removed. Please contact us on the gcrypt-devel mailing list to
discuss whether you really need this feature or how it can be
replaced by an internal plugin mechanism.

* CTR mode may now be used with data chunks of arbitrary length.

* Interface changes relative to the 1.4.6 release:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GCRY_PK_ECDH NEW.
gcry_pk_get_curve NEW.
gcry_pk_get_param NEW.
GCRYCTL_DISABLE_HWF NEW.
gcry_kdf_derive NEW.
gcry_pk_encrypt EXTENDED: Support OAEP.
gcry_pk_decrypt EXTENDED: Support OAEP.
gcry_pk_sign EXTENDED: Support PSS.
gcry_pk_verify EXTENDED: Support PSS.
gcry_sexp_build EXTENDED: Add format specifiers M and u.


Source code is hosted at the GnuPG FTP server and its mirrors as
listed at http://www.gnupg.org/download/mirrors.html . On the primary
server the source file and its digital signatures is:

ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.5.0.tar.bz2 (1400k)
ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.5.0.tar.bz2.sig

This file is bzip2 compressed. A gzip compressed version is also
available:

ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.5.0.tar.gz (1698k)
ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.5.0.tar.gz.sig

Due to a lot of changes regarding white spaces we don't provide a
patch file against 1.4.6.

The SHA-1 checksums are:

e6508315b76eaf3d0df453f67371b106654bd4fe libgcrypt-1.5.0.tar.gz
3e776d44375dc1a710560b98ae8437d5da6e32cf libgcrypt-1.5.0.tar.bz2

For help on developing with Libgcrypt you should read the included
manual and optional ask on the gcrypt-devel mailing list [1].

Improving Libgcrypt is costly, but you can help! We are looking for
organizations that find Libgcrypt useful and wish to contribute back.
You can contribute by reporting bugs, improve the software [2], order
extensions or support or more general by donating money to the Free
Software movement [3].

Commercial support contracts for Libgcrypt are available [4], and they
help finance continued maintenance. g10 Code GmbH, a Duesseldorf
based company, is currently funding Libgcrypt development. We are
always looking for interesting development projects.

Many thanks to all who contributed to Libgcrypt development, be it bug
fixes, code, documentation, testing or helping users.


Happy hacking,

Werner




[1] See <http://www.gnupg.org/documentation/mailing-lists.html>.
[2] Note that copyright assignments to the FSF are required.
[3] For example see <http://fsfe.org/donate/>.
[4] See the service directory at <http://gnupg.org/service.html>.

--
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.