delta/libgcrypt.git/doc, branch http-to-https

use https instead of cleartext http where possible

2019-05-14T20:26:02+00:00

The following domains all offer https, so use it:

 - creativecommons.org
 - cr.yp.to
 - cryptojedi.org
 - crypto.stanford.edu
 - csrc.nist.gov
 - donate.fsf.org
 - ed25519.cr.yp.to
 - eprint.iacr.org
 - git.savannah.gnu.org
 - gnu.org
 - graphics.stanford.edu
 - info.isl.ntt.co.jp
 - lists.gnu.org
 - lists.gnupg.org
 - people.csail.mit.edu
 - shiftleft.org
 - software.intel.com
 - tools.ietf.org
 - web.archive.org
 - web.cs.ucdavis.edu
 - www.calcurco.cat
 - www.columbia.edu
 - www.cs.tau.ac.il
 - www.cs.technion.ac.il
 - www.cs.ucdavis.edu
 - www.g10code.com
 - www.gnu.org
 - www.gnupg.org
 - www.ii.uib.no
 - www.intel.com
 - www.larc.usp.br

Signed-off-by: Daniel Kahn Gillmor

Limit and document Blowfish key lengths to 8-576 bits

2019-04-18T15:53:35+00:00

* cipher/blowfish.c (BLOWFISH_KEY_MIN_BITS)
(BLOWFISH_KEY_MAX_BITS): New.
(do_bf_setkey): Check input key length to MIN_BITS and MAX_BITS.
* doc/gcrypt.texi: Update supported Blowfish key lengths.
* tests/basic.c (check_ecb_cipher): New, with Blowfish test vectors
for different key lengths.
(check_cipher_modes): Call 'check_ecb_cipher'.
--

As noted by Peter Wu, Blowfish cipher implementation already supports key
lengths 8 to 576 bits [1]. This change updates documentation to reflect
that and adds new test vectors to check handling of different key lengths.

[1] https://lists.gnupg.org/pipermail/gcrypt-devel/2019-April/004680.html

Signed-off-by: Jussi Kivilinna

Add SHA512/224 and SHA512/256 algorithms

2019-04-05T17:10:32+00:00

* cipher/mac-hmac.c (map_mac_algo_to_md): Add mapping for SHA512/224
and SHA512/256.
(_gcry_mac_type_spec_hmac_sha512_256)
(_gcry_mac_type_spec_hmac_sha512_224): New.
* cipher/mac-internal.h (_gcry_mac_type_spec_hmac_sha512_256)
(_gcry_mac_type_spec_hmac_sha512_224): New.
* cipher/mac.c (mac_list, mac_list_algo101): Add SHA512/224 and
SHA512/256.
* cipher/md.c (digest_list, digest_list_algo301)
(prepare_macpads): Ditto.
* cipher/sha512.c (run_selftests): Ditto.
(sha512_init_common): Move common initialization here.
(sha512_init, sha384_init): Use common initialization function.
(sha512_224_init, sha512_256_init, _gcry_sha512_224_hash_buffer)
(_gcry_sha512_224_hash_buffers, _gcry_sha512_256_hash_buffer)
(_gcry_sha512_256_hash_buffers, selftests_sha512_224)
(selftests_sha512_256, sha512_224_asn, oid_spec_sha512_224)
(_gcry_digest_spec_sha512_224, sha512_256_asn, oid_spec_sha512_256)
(_gcry_digest_spec_sha512_256): New.
* doc/gcrypt.texi: Add SHA512/224 and SHA512/256; Add missing
HMAC-BLAKE2s and HMAC-BLAKE2b.
* src/cipher.h (_gcry_digest_spec_sha512_224)
(_gcry_digest_spec_sha512_256): New.
* src/gcrypt.h.in (GCRY_MD_SHA512_256, GCRY_MD_SHA512_224): New.
(GCRY_MAC_HMAC_SHA512_256, GCRY_MAC_HMAC_SHA512_224): New.
* tests/basic.c (check_digests): Add SHA512/224 and SHA512/256
test vectors.
--

This change adds truncated SHA512/224 and SHA512/256 algorithms
specified in FIPS 180-4.

Signed-off-by: Jussi Kivilinna

doc: add mention about aligning data to cachelines for best performance

2019-03-24T08:49:29+00:00

* doc/gcrypt.text: Add mention about aligning data to cachelines for
best performance.
--

GnuPG-bug-id: 2388
Signed-off-by: Jussi Kivilinna

doc/gcrypt.texi: update HW feature list

2019-03-23T18:41:57+00:00

* doc/gcrypt.texi: Update FW feature list.
--

Signed-off-by: Jussi Kivilinna

doc: Fix library initialization examples

2018-11-19T08:02:21+00:00

Signed-off-by: Andreas Metzler

doc: Update yat2m.c from upstream (libgpg-error)

2018-10-24T10:06:17+00:00

--
GnuPG-bug-id: 4102

Signed-off-by: Werner Koch

doc: Fix example for gcry_sexp_extract_param

2018-10-23T20:48:31+00:00

--

RFC-8439 was published.

2018-07-04T05:09:38+00:00

* cipher/cipher-poly1305.c: Update RFC reference.

Signed-off-by: NIIBE Yutaka

doc: Clarify the value range of the use-rsa-e parameter.

2018-03-22T14:29:10+00:00

--

Signed-off-by: Werner Koch