summaryrefslogtreecommitdiff
path: root/README
Commit message (Collapse)AuthorAgeFilesLines
* fips: Use ELF header to find hmac file offsetClemens Lang via Gcrypt-devel2022-02-151-1/+2
| | | | | | | | | | | | | | | | | | | | | | * src/fips.c [ENABLE_HMAC_BINARY_CHECK] (hmac256_check): Use ELF headers to locate the file offset for the HMAC in addition to information from the loader -- The previous method of locating the offset of the .rodata1 section in the ELF file on disk used information obtained from the loader. This computed the address of the value in memory at runtime, but the offset in the file can be different. Specifically, the old code computed a value relative to ElfW(Phdr).p_vaddr, but the offset in the file is relative to ElfW(Phdr).p_offset. These values can differ, so the computed address at runtime must be translated into a file offset relative to p_offset. This is largely cosmetic, since the text section that should contain the HMAC usually has both p_vaddr and p_offset set to 0. Signed-off-by: Clemens Lang <cllang@redhat.com>
* Remove the built-in memory guard support.NIIBE Yutaka2022-02-101-6/+0
| | | | | | | | | | | | | | | | | * configure.ac (--enable-m-guard): Remove. * src/global.c (_gcry_vcontrol): Return GPG_ERR_NOT_SUPPORTED for GCRYCTL_ENABLE_M_GUARD. * src/stdmem.c (use_m_guard, _gcry_private_enable_m_guard): Remove. (_gcry_private_malloc): Remove the code path with use_m_guard==1. (_gcry_private_malloc_secure): Likewise. (_gcry_private_realloc, _gcry_private_free): Likewise. (_gcry_private_check_heap): Remove. * src/stdmem.h: Remove declarations for memory guard functions. -- GnuPG-bug-id: T5822 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Address the bug on AArch64 in README.NIIBE Yutaka2021-09-281-0/+6
| | | | | | | -- GnuPG-bug-id: 5581 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Allow passing FIPS module versionJakub Jelen2021-09-201-0/+4
| | | | | | | | | | | | | | * README: Document new --with-fips-module-version=version switch * configure.ac: Implementation of the --with-fips-module-version * src/global.c (print_config): Print FIPS module version from above -- Signed-off-by: Jakub Jelen <jjelen@redhat.com> Moved the module version to a 3rd field to keep the semantics of that line. Signed-off-by: Werner Koch <wk@gnupg.org> GnuPG-bug-id: 1600
* Release 1.9.0libgcrypt-1.9.0Werner Koch2021-01-191-8/+7
|
* Merge release info from 1.8.4Werner Koch2018-10-261-1/+4
| | | | --
* Add NEWS from the 1.8 and 1.7 branches.Werner Koch2018-06-131-4/+4
| | | | --
* Release 1.8.0libgcrypt-1.8.0Werner Koch2017-07-181-3/+3
| | | | Signed-off-by: Werner Koch <wk@gnupg.org>
* Release 1.7.1libgcrypt-1.7.1Werner Koch2016-06-151-0/+4
|
* Release 1.7.0libgcrypt-1.7.0Werner Koch2016-04-151-35/+19
| | | | Signed-off-by: Werner Koch <wk@gnupg.org>
* Open new development branch.Werner Koch2013-12-161-1/+3
| | | | --
* Release 1.6.0.libgcrypt-1.6.0Werner Koch2013-12-161-2/+13
|
* Add configure option --enable-large-data-tests.Werner Koch2013-12-161-0/+4
| | | | | | | | | | | | | * configure.ac: Add option --enable-large-data-tests. * tests/hashtest-256g.in: New. * tests/Makefile.am (EXTRA_DIST): Add hashtest-256g.in. (TESTS): Split up into tests_bin, tests_bin_last, tests_sh, and tests_sh_last. (tests_sh_last): Add hashtest-256g (noinst_PROGRAMS): Add only tests_bin and tests_bin_last. (bench-slope.log, hashtest-256g.log): New rules to enforce serial run. Signed-off-by: Werner Koch <wk@gnupg.org>
* Update license informationWerner Koch2013-12-131-12/+4
| | | | | | | | | * LICENSES: New. * Makefile.am (EXTRA_DIST): Add LICENSES. * AUTHORS: Add list of copyright holders. * README: Reference AUTHORS. Signed-off-by: Werner Koch <wk@gnupg.org>
* Update the copyright years.Werner Koch2012-12-031-1/+1
| | | | --
* Prepare a new development branchWerner Koch2011-06-291-1/+3
|
* Prepare for the 1.5.0 release.libgcrypt-1.5.0Werner Koch2011-06-291-6/+3
|
* Final changes for 1.5.0-beta1libgcrypt-1.5.0-beta1Werner Koch2011-02-211-1/+1
|
* First take on using AES-NI instructionsWerner Koch2011-02-131-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This first naive use of the new Intel AES-NI instructions boosts the performance of AES on CPUs supporting this by 3 to 5 times. Results from running ./benchmark --cipher-repetitions 10 --large-buffers cipher aes on a cpu family : 6 model : 37 model name : Intel(R) Core(TM) i5 CPU 660 @ 3.33GHz stepping : 2 cpu MHz : 3325.494 cache size : 4096 KB cpu cores : 2 yields this: ECB/Stream CBC CFB OFB CTR --------------- --------------- --------------- --------------- --------------- 130ms 110ms 110ms 100ms 110ms 110ms 160ms 150ms 170ms 170ms 40ms 40ms 20ms 30ms 30ms 20ms 70ms 70ms 80ms 80ms The first line is with runtime switched off AES-NI instructions (don't set use_aesni in do_setkey), the second with enabled AES-NI. By fixing the alignment, I hope to squeeze out a little more even with this naive implementation.
* Nuked almost all trailing whitespace.post-nuke-of-trailing-wsWerner Koch2011-02-041-16/+15
| | | | Check and install the standard git pre-commit hook.
* Add option --disable-O-flag-munging.Werner Koch2009-12-101-0/+12
|
* Fix detection of cpuid statement.Werner Koch2009-11-291-7/+5
|
* Doc fixes.Werner Koch2009-05-101-3/+48
|
* Prepare for new developments.Werner Koch2009-01-221-1/+3
|
* Preparinglibgcrypt-1.4.4Werner Koch2009-01-221-2/+2
|
* Preparing a releaseWerner Koch2008-09-181-1/+1
|
* doc cleanupsWerner Koch2008-09-081-2/+2
|
* Updated the architecture chapterWerner Koch2008-09-051-3/+3
|
* Prepare a release candidatelibgcrypt-1.4.2rc2Werner Koch2008-09-011-2/+1
|
* Completed the RNG implementaion switching.Werner Koch2008-08-221-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | Added framework for running RNG tests. Added an experimental option --enable-hmac-binary-check to configure. --This line, and those below, will be ignored-- M src/fips.c M src/cipher-proto.h M src/global.c M src/hmac256.c M src/ChangeLog M src/hmac256.h M src/Makefile.am M tests/Makefile.am M configure.ac M doc/gcrypt.texi M random/random-fips.c M random/random.c M random/rand-internal.h M random/random.h M random/ChangeLog M ChangeLog M README
* Adding gcry_mpi_lshift.libgcrypt-1.4.2rc1Werner Koch2008-08-191-1/+3
| | | | | Preparing a release candidate.
* Preparing the releaselibgcrypt-1.4.1Werner Koch2008-04-251-2/+3
|
* Preparing 1.4.0.libgcrypt-1.4.0Werner Koch2007-12-101-38/+94
|
* Made all library code LGPL.Werner Koch2007-08-221-13/+6
|
* Changed rndw32 to LGPL.Werner Koch2007-08-221-1/+0
| | | | | Typo fixes.
* Camellia is now LGPLedWerner Koch2007-05-311-1/+0
|
* Post release updates.Werner Koch2007-05-041-2/+2
| | | | | Allow colons as delimiters for --enable-mpi-path.
* More info from GCRYCTL_PRINT_CONFIG.Werner Koch2007-05-021-4/+33
| | | | | Put Camellia symbols into our namespace.
* Tweaks for W32Werner Koch2007-02-221-0/+5
|
* A lot of cleanups as well as minor API changes.Werner Koch2007-02-211-1/+1
| | | | | Ported some changes from 1.2 to here.
* New configure option --disable-endian-check.Werner Koch2007-02-201-0/+6
|
* More changes.Werner Koch2006-03-171-2/+4
|
* Move detection of basic stuff to the top. ForWerner Koch2005-06-101-3/+2
| | | | | | example we need to know whether gcc is used before testing for it. Reported by Ralf Fassel.
* Prepared development branch (actually CVS HEAD)Werner Koch2004-04-151-1/+5
|
* About to release 1.2Werner Koch2004-04-151-22/+8
|
* * configure.ac: Set LT to C12/A1/R0.Werner Koch2004-03-291-2/+2
| | | | | | * libgcrypt-config.in (Options): Ignore the obsolete --threads option for now.
* * configure.ac: Bumbed LT version to C10/A3/R0.V1-1-90Werner Koch2003-11-141-3/+5
| | | | | | | | | * configure.ac (have_ld_version_script): Set the default in a separate test. (PRINTABLE_OS_NAME): Don't handle the Hurd extra, this leads to conflicts with BSD based GNU systems. The Hurd has now a working uname.
* About to release 1.1.43V1-1-43Werner Koch2003-09-041-1/+1
|
* New file with hints on changing applications for the new API.Werner Koch2003-07-271-1/+1
| | | | | unfinished....
* 2003-07-05 Moritz Schulte <moritz@g10code.com>Moritz Schulte2003-07-051-8/+15
| | | | | * README: Few changes, mention libgpg-error.