summaryrefslogtreecommitdiff
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Add detection for HW feature "intel-gfni"Jussi Kivilinna2022-04-241-0/+1
| | | | | | | | | | | | * configure.ac (gfnisupport, gcry_cv_gcc_inline_asm_gfni) (ENABLE_GFNI_SUPPORT): New. * src/g10lib.h (HWF_INTEL_GFNI): New. * src/hwf-x86.c (detect_x86_gnuc): Add GFNI detection. * src/hwfeatures.c (hwflist): Add "intel-gfni". * doc/gcrypt.texi: Add "intel-gfni" to HW features list. -- Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: Fix missing ARM hardware featuresTianjia Zhang2022-04-061-0/+4
| | | | | | | * doc/gcrypt.texi: Add sha3/sm3/sm4/sha512 to ARM hardware features. -- Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
* doc: Update yat2m from libgpg-error.NIIBE Yutaka2022-04-051-47/+278
| | | | | | | | | | | * doc/yat2m.c: Update. -- Stderr output of "writing '<THE PAGE NAME>'" will be suppressed unless --verbose is specified. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* build: Fix for build for Windows.NIIBE Yutaka2022-03-281-4/+4
| | | | | | | | | * cipher/Makefile.am: Use EXEEXT_FOR_BUILD. * doc/Makefile.am: Likewise. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Typo and grammar fixes.Werner Koch2022-03-281-201/+201
| | | | | | -- GnuPG-bug-id: 5596 Contributed-by: Mikhail Ryazanov
* Add detection for HW feature "intel-avx512"Jussi Kivilinna2022-03-071-0/+1
| | | | | | | | | | | | * configure.ac (avx512support, gcry_cv_gcc_inline_asm_avx512) (ENABLE_AVX512_SUPPORT): New. * src/g10lib.h (HWF_INTEL_AVX512): New. * src/hwf-x86.c (detect_x86_gnuc): Add AVX512 detection. * src/hwfeatures.c (hwflist): Add "intel-avx512". * doc/gcrypt.texi: Add "intel-avx512" to HW features list. -- Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* Remove the built-in memory guard support.NIIBE Yutaka2022-02-101-6/+2
| | | | | | | | | | | | | | | | | * configure.ac (--enable-m-guard): Remove. * src/global.c (_gcry_vcontrol): Return GPG_ERR_NOT_SUPPORTED for GCRYCTL_ENABLE_M_GUARD. * src/stdmem.c (use_m_guard, _gcry_private_enable_m_guard): Remove. (_gcry_private_malloc): Remove the code path with use_m_guard==1. (_gcry_private_malloc_secure): Likewise. (_gcry_private_realloc, _gcry_private_free): Likewise. (_gcry_private_check_heap): Remove. * src/stdmem.h: Remove declarations for memory guard functions. -- GnuPG-bug-id: T5822 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Update more information about FIPS selftests and algorithmsJakub Jelen2022-01-251-14/+175
| | | | | | | | | | | | * doc/gcrypt.texi: List implemented GOST curves. Update location of the HMAC selftests and add SHA3 ones. Add information about ECC selftests. Add information about KDF selftests. Update information about additional MAC selftests. Update ifnromation about FIPS allowed algorithms. -- Signed-off-by: Jakub Jelen <jjelen@redhat.com>
* fips: Remove GCRYCTL_FIPS_SERVICE_INDICATOR and renumber the enum.NIIBE Yutaka2022-01-171-0/+1
| | | | | | | | | | | | * src/gcrypt.h.in (enum gcry_ctl_cmds): Remove GCRYCTL_FIPS_SERVICE_INDICATOR. * src/fips.c (_gcry_fips_indicator_cipher): Use gcry_kdf_algos. * tests/basic.c: Use GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER. -- GnuPG-bug-id: 5512 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Update documentation related to FIPSJakub Jelen2022-01-171-73/+49
| | | | | | | | | | | * cipher/rsa.c (selftest_encr_2048): Fix error message * doc/gcrypt.texi: Add missing hwfeatures Add description of the service indicator API Fix typo in tampered word Add some missing curves Remove algoriths no longer used in FIPS mode and update claims given -- Signed-off-by: Jakub Jelen <jjelen@redhat.com>
* random: Rename rndlinux module to rndoldlinux.NIIBE Yutaka2022-01-111-4/+4
| | | | | | | | | | | | | | | | | | * configure.ac (USE_RNDOLDLINUX): Rename from USE_RNDLINUX. (GCRYPT_RANDOM): Use rndoldlinux.lo. * doc/gcrypt.texi: Update. * random/Makefile.am (EXTRA_librandom_la_SOURCES): Update. * random/rndoldlinux.c: Rename from rndlinux.c. Rename the function. * random/rand-internal.h: Update the function name. * random/random-csprng.c: Update the calls to the function. * random/random-drbg.c: Likewise. * random/random-system.c: Likewise. * src/global.c: Use USE_RNDOLDLINUX. -- GnuPG-bug-id: 5759 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* fips: Provide a mechanizm to put libgcrypt in non-FIPS mode.NIIBE Yutaka2022-01-111-1/+39
| | | | | | | | | | | | * doc/gcrypt.texi (Disabling FIPS mode): Add. * src/gcrypt.h.in (GCRYCTL_NO_FIPS_MODE): New. * src/global.c (_gcry_vcontrol): Support GCRYCTL_NO_FIPS_MODE. * tests/t-ed25519.c: Add --no-fips option to test non-FIPS mode. -- GnuPG-bug-id: 5747 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Fix previous commit.NIIBE Yutaka2022-01-041-1/+1
| | | | | | -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Update doc/gcrypt.texi for random/.NIIBE Yutaka2022-01-041-47/+33
| | | | | | | | | | * doc/gcrypt.texi: Address rndgetentropy module. Remove X9.31 RPNG documentation, as the implementation has been removed already. -- GnuPG-bug-id: 5692 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* build: cipher/Makefile.am, doc/Makefile.am: add a missing spaceAlexander Kanavin2021-12-071-1/+1
| | | | | | | | | * cipher/Makefile.am: Add a space. * doc/Makefile.am: Ditto. -- Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
* random: Remove use of experimental random daemon.NIIBE Yutaka2021-12-071-9/+0
| | | | | | | | | | | | | | | | | | | * random/Makefile.am (librandom_la_SOURCES): Remove random-daemon.c. * random/random-daemon.c: Remove. * random/rand-internal.h: Remove declarations. * random/random-csprng.c (_gcry_rngcsprng_set_daemon_socket) (_gcry_rngcsprng_use_daemon): Remove. [USE_RANDOM_DAEMON] (_gcry_rngcsprng_randomize): Don't call _gcry_daemon_randomize. * random/random.c (_gcry_set_random_daemon_socket) (_gcry_use_random_daemon): Remove. * src/global.c (_gcry_vcontrol): Return GPG_ERR_NOT_SUPPORTED. * tests/benchmark.c (main): Remove support of use_random_daemon. -- GnuPG-bug-id: 5706 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Reference the new FIPS 140-3Jakub Jelen2021-11-051-2/+2
| | | | | | | | * doc/gcrypt.texi: Replace -2 with -3 * cipher/ecc-curves.c: Replace -2 with -3 -- Signed-off-by: Jakub Jelen <jjelen@redhat.com>
* doc: Add entries for hash+sign functions.NIIBE Yutaka2021-10-151-0/+52
| | | | Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Remove the forced fips modeJakub Jelen2021-09-201-34/+8
| | | | | | | | | | | | | | | | | | | | | | | | * cipher/rsa.c (generate_fips): Drop reference to enforced fips mode and use normal FIPS mode check * doc/gcrypt.texi: Drop references to enforced FIPS mode * src/fips.c (enforced_fips_mode): Removed (_gcry_initialize_fips_mode): Remove reading of the FIPS_FORCE_FILE to enforce FIPS mode (_gcry_enforced_fips_mode): Remove (_gcry_set_enforced_fips_mode): Remove * src/g10lib.h (_gcry_enforced_fips_mode): Remove declaration (_gcry_set_enforced_fips_mode): Remova declaration * src/global.c (print_config): Remove the forced fips flag (_gcry_vcontrol): Deprecate GCRYCTL_SET_ENFORCED_FIPS_FLAG (get_no_secure_memory): Ignore the option in FIPS mode -- Signed-off-by: Jakub Jelen <jjelen@redhat.com> (_gcry_vcontrol): Simply ignore GCRYCTL_SET_ENFORCED_FIPS_FLAG. Signed-off-by: Werner Koch <wk@gnupg.org> GnuPG-bug-id: 5244
* Add AES-GCM-SIV mode (RFC 8452)Jussi Kivilinna2021-08-261-6/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cipher/Makefile.am: Add 'cipher-gcm-siv.c'. * cipher/cipher-gcm-siv.c: New. * cipher/cipher-gcm.c (_gcry_cipher_gcm_setupM): New. * cipher/cipher-internal.h (gcry_cipher_handle): Add 'siv_keylen'. (_gcry_cipher_gcm_setupM, _gcry_cipher_gcm_siv_encrypt) (_gcry_cipher_gcm_siv_decrypt, _gcry_cipher_gcm_siv_set_nonce) (_gcry_cipher_gcm_siv_authenticate) (_gcry_cipher_gcm_siv_set_decryption_tag) (_gcry_cipher_gcm_siv_get_tag, _gcry_cipher_gcm_siv_check_tag) (_gcry_cipher_gcm_siv_setkey): New prototypes. (cipher_block_bswap): New helper function. * cipher/cipher.c (_gcry_cipher_open_internal): Add 'GCRY_CIPHER_MODE_GCM_SIV'; Refactor mode requirement checks for better size optimization (check pointers & blocksize in same order for all). (cipher_setkey, cipher_reset, _gcry_cipher_setup_mode_ops) (_gcry_cipher_setup_mode_ops, _gcry_cipher_info): Add GCM-SIV. (_gcry_cipher_ctl): Handle 'set decryption tag' for GCM-SIV. * doc/gcrypt.texi: Add GCM-SIV. * src/gcrypt.h.in (GCRY_CIPHER_MODE_GCM_SIV): New. (GCRY_SIV_BLOCK_LEN, gcry_cipher_set_decryption_tag): Add to comment that these are also for GCM-SIV in addition to SIV mode. * tests/basic.c (check_gcm_siv_cipher): New. (check_cipher_modes): Check for GCM-SIV. * tests/bench-slope.c (bench_gcm_siv_encrypt_do_bench) (bench_gcm_siv_decrypt_do_bench, bench_gcm_siv_authenticate_do_bench) (gcm_siv_encrypt_ops, gcm_siv_decrypt_ops) (gcm_siv_authenticate_ops): New. (cipher_modes): Add GCM-SIV. (cipher_bench_one): Check key length requirement for GCM-SIV. -- GnuPG-bug-id: T4485 Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* Add SIV mode (RFC 5297)Jussi Kivilinna2021-08-261-2/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cipher/Makefile.am: Add 'cipher-siv.c'. * cipher/cipher-ctr.c (_gcry_cipher_ctr_encrypt): Rename to _gcry_cipher_ctr_encrypt_ctx and add algo context parameter. (_gcry_cipher_ctr_encrypt): New using _gcry_cipher_ctr_encrypt_ctx. * cipher/cipher-internal.h (gcry_cipher_handle): Add 'u_mode.siv'. (_gcry_cipher_ctr_encrypt_ctx, _gcry_cipher_siv_encrypt) (_gcry_cipher_siv_decrypt, _gcry_cipher_siv_set_nonce) (_gcry_cipher_siv_authenticate, _gcry_cipher_siv_set_decryption_tag) (_gcry_cipher_siv_get_tag, _gcry_cipher_siv_check_tag) (_gcry_cipher_siv_setkey): New. * cipher/cipher-siv.c: New. * cipher/cipher.c (_gcry_cipher_open_internal, cipher_setkey) (cipher_reset, _gcry_cipher_setup_mode_ops, _gcry_cipher_info): Add GCRY_CIPHER_MODE_SIV handling. (_gcry_cipher_ctl): Add GCRYCTL_SET_DECRYPTION_TAG handling. * doc/gcrypt.texi: Add documentation for SIV mode. * src/gcrypt.h.in (GCRYCTL_SET_DECRYPTION_TAG): New. (GCRY_CIPHER_MODE_SIV): New. (gcry_cipher_set_decryption_tag): New. * tests/basic.c (check_siv_cipher): New. (check_cipher_modes): Add call for 'check_siv_cipher'. * tests/bench-slope.c (bench_encrypt_init): Use double size key for SIV mode. (bench_aead_encrypt_do_bench, bench_aead_decrypt_do_bench) (bench_aead_authenticate_do_bench): Reset cipher context on each run. (bench_aead_authenticate_do_bench): Support nonce-less operation. (bench_siv_encrypt_do_bench, bench_siv_decrypt_do_bench) (bench_siv_authenticate_do_bench, siv_encrypt_ops) (siv_decrypt_ops, siv_authenticate_ops): New. (cipher_modes): Add SIV mode benchmarks. (cipher_bench_one): Restrict SIV mode testing to 16 byte block-size. -- GnuPG-bug-id: T4486 Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: Fix a typo.NIIBE Yutaka2021-07-221-1/+1
| | | | | | -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Clarify gcry_md_setkey for keyed BLAKE hashes.Werner Koch2021-04-261-2/+2
| | | | --
* build: Fix for make distcheck, no EPS support.NIIBE Yutaka2021-03-301-3/+1
| | | | | | | * Makefile.am (AM_DISTCHECK_DVI_TARGET): Specify 'pdf'. * doc/Makefile.am (EXTRA_DIST, BUILT_SOURCES): Remove .eps files. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* build: Revert the previous commit.NIIBE Yutaka2021-03-251-1/+3
| | | | | | | | | -- The .fig format is vector graphics format. It is not good to convert it to raster format to be included by TeX. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* build: Remove intermediate PDF files from EXTRA_DIST.NIIBE Yutaka2021-03-251-3/+1
| | | | | | | | | | | | | * doc/Makefile.am (EXTRA_DIST): Remove PDF files. (BUILT_SOURCES): Likewise. -- When texi2pdf is invoked, etex is invoked. And it's actually pdftex these days, which can process PNG files directly. So, no need to prepare PDF files. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Document newly added optimizationsJakub Jelen2021-03-061-0/+8
| | | | | | | | | | | | * doc/gcrypt.texi: Add HW features 'intel-vaes-vpclmul', 'ppc-vcrypto', 'ppc-arch_3_00', 'ppc-arch_2_07', 's390x-msa', 's390x-msa-4', 's390x-msa-8' and 's390x-vx'. -- Signed-off-by: Jakub Jelen <jjelen@redhat.com> [jk: fixed "pc-" and "390x-" typos to "ppc-" and "s390x-" ] GnuPG-bug-id: 5337 Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: Fix swapped GCM/CCM constants.Werner Koch2021-02-171-1/+1
| | | | | -- GnuPG-bug-id: 5306
* ecc: Change an error code of gcry_ecc_mul_point.Werner Koch2021-01-181-3/+39
| | | | | | | | | | | | | * cipher/ecc-ecdh.c (_gcry_ecc_mul_point): Return GPG_ERR_UNKNOWN_CURVE. -- Unknown_curve is more specific than unknown_algorithm. This patch also adds documentation and renames rthe parameter from 'algo' to 'curveid'. Signed-off-by: Werner Koch <wk@gnupg.org>
* doc: Add missing OIDs to the list of supported curvesWerner Koch2021-01-071-8/+64
| | | | | | | | | -- Also add brainpool curves. GnuPG-bug-id: 3220 Signed-off-by: Werner Koch <wk@gnupg.org>
* Add SM4 symmetric cipher algorithmTianjia Zhang2020-06-161-0/+10
| | | | | | | | | | | | | | | | | | | | | * cipher/Makefile.am (EXTRA_libcipher_la_SOURCES): Add sm4.c. * cipher/cipher.c (cipher_list, cipher_list_algo301): Add _gcry_cipher_spec_sm4. * cipher/mac-cmac.c (map_mac_algo_to_cipher): Add cmac SM4. (_gcry_mac_type_spec_cmac_sm4): Add cmac SM4. * cipher/mac-internal.h: Declare spec_cmac_sm4. * cipher/mac.c (mac_list, mac_list_algo201): Add cmac SM4. * cipher/sm4.c: New. * configure.ac (available_ciphers): Add sm4. * doc/gcrypt.texi: Add SM4 document. * src/cipher.h: Add declarations for SM4 and cmac SM4. * src/gcrypt.h.in (gcry_cipher_algos): Add algorithm ID for SM4. -- Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> [jk: add missing mapping in mac-cmac.c:map_mac_algo_to_cipher] [jk: add GCRY_MAC_CMAC_SM4 to gcrypt.texi] Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: add GCRY_MD_SM3, GCRY_MAC_HMAC_SM3 and GCRY_MAC_GOST28147_IMITJussi Kivilinna2020-06-161-0/+12
| | | | | | | | * doc/gcrypt.texi: add GCRY_MD_SM3, GCRY_MAC_HMAC_SM3 and GCRY_MAC_GOST28147_IMIT. -- Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: The shortest doc dot fix ever.Werner Koch2020-06-051-1/+1
| | | | --
* ecc: Make 1.3.101.112 and alias for Ed25519Werner Koch2020-05-131-3/+6
| | | | | | -- Fixes-commit: c750b784d2bee0a32be72bcfb818e0a7683fa914
* doc: Really minor fixes.Werner Koch2020-05-061-4/+4
| | | | --
* sexp: Extend gcry_sexp_extract_param with a multi-string extractor.Werner Koch2020-04-141-0/+8
| | | | | | | | | | * src/sexp.c (_gcry_sexp_vextract_param): Implement "%#s" control sequence. -- This comes handy to extract a list of flags. Signed-off-by: Werner Koch <wk@gnupg.org>
* sexp: Extend gcry_sexp_extract_param with new format specifiers.Werner Koch2020-04-091-1/+20
| | | | | | | * src/sexp.c (_gcry_sexp_vextract_param): Add new conversion methods. * tests/t-sexp.c (check_extract_param): Add corresponding tests. Signed-off-by: Werner Koch <wk@gnupg.org>
* gost28147: add support for CryptoPro key meshing per RFC 4357Dmitry Baryshkov2020-03-201-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | * cipher/gost28147.c (gost_do_set_sbox, cryptopro_key_meshing, CryptoProMeshingKey, gost_encrypt_block_mesh): New. (_gcry_cipher_spec_gost28147_mesh): New cipher with keymeshing, (_gcry_cipher_spec_gost28147): Remove OIDs for this cipher should not be selected using these OIDs (they are for CFB with keymeshing). * cipher/cipher.c (cipher_list, cipher_list_algo301): add _gcry_cipher_spec_gost28147_mesh. * src/gcrypt.h.in (GCRY_CIPHER_GOST28147_MESH): New cipher with keymeshing. * doc/gcrypt.texi (GCRY_CIPHER_GOST28147_MESH): Add definition. * tests/basic.c (check_gost28147_cipher, check_gost28147_cipher_basic): Run basic tests on GCRY_CIPHER_GOST28147_MESH. -- Add actual cipher implementing CryptoPro KeyMeshing. This has been requested by AltLinux team to properly support CFB-encrypted CMS files. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* doc: Fix description of hash algorithmsSébastien Helleu2020-03-031-2/+2
| | | | --
* gcrypt.texi: fix GCRYCTL_GET_ALGO_NENCR typoJussi Kivilinna2020-01-191-1/+1
| | | | | | | * doc/gcrypt.texi: Fix GCRYCTL_GET_ALGO_NENC to GCRYCTL_GET_ALGO_NENCR. -- Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* build: Use {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD for helper programs.NIIBE Yutaka2019-07-221-1/+2
| | | | | | | | | | * configure.ac (CC_FOR_BUILD): Use AX_CC_FOR_BUILD. * cipher/Makefile.am (gost-s-box): Add {CFLAGS,CPPFLAGS,LDFLAGS}_FOR_BUILD. * doc/Makefile.am (yat2m): Likewise. * m4/ax_cc_for_build.m4: New. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Limit and document Blowfish key lengths to 8-576 bitsJussi Kivilinna2019-04-181-3/+3
| | | | | | | | | | | | | | | | | | * cipher/blowfish.c (BLOWFISH_KEY_MIN_BITS) (BLOWFISH_KEY_MAX_BITS): New. (do_bf_setkey): Check input key length to MIN_BITS and MAX_BITS. * doc/gcrypt.texi: Update supported Blowfish key lengths. * tests/basic.c (check_ecb_cipher): New, with Blowfish test vectors for different key lengths. (check_cipher_modes): Call 'check_ecb_cipher'. -- As noted by Peter Wu, Blowfish cipher implementation already supports key lengths 8 to 576 bits [1]. This change updates documentation to reflect that and adds new test vectors to check handling of different key lengths. [1] https://lists.gnupg.org/pipermail/gcrypt-devel/2019-April/004680.html Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* Add SHA512/224 and SHA512/256 algorithmsJussi Kivilinna2019-04-051-2/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cipher/mac-hmac.c (map_mac_algo_to_md): Add mapping for SHA512/224 and SHA512/256. (_gcry_mac_type_spec_hmac_sha512_256) (_gcry_mac_type_spec_hmac_sha512_224): New. * cipher/mac-internal.h (_gcry_mac_type_spec_hmac_sha512_256) (_gcry_mac_type_spec_hmac_sha512_224): New. * cipher/mac.c (mac_list, mac_list_algo101): Add SHA512/224 and SHA512/256. * cipher/md.c (digest_list, digest_list_algo301) (prepare_macpads): Ditto. * cipher/sha512.c (run_selftests): Ditto. (sha512_init_common): Move common initialization here. (sha512_init, sha384_init): Use common initialization function. (sha512_224_init, sha512_256_init, _gcry_sha512_224_hash_buffer) (_gcry_sha512_224_hash_buffers, _gcry_sha512_256_hash_buffer) (_gcry_sha512_256_hash_buffers, selftests_sha512_224) (selftests_sha512_256, sha512_224_asn, oid_spec_sha512_224) (_gcry_digest_spec_sha512_224, sha512_256_asn, oid_spec_sha512_256) (_gcry_digest_spec_sha512_256): New. * doc/gcrypt.texi: Add SHA512/224 and SHA512/256; Add missing HMAC-BLAKE2s and HMAC-BLAKE2b. * src/cipher.h (_gcry_digest_spec_sha512_224) (_gcry_digest_spec_sha512_256): New. * src/gcrypt.h.in (GCRY_MD_SHA512_256, GCRY_MD_SHA512_224): New. (GCRY_MAC_HMAC_SHA512_256, GCRY_MAC_HMAC_SHA512_224): New. * tests/basic.c (check_digests): Add SHA512/224 and SHA512/256 test vectors. -- This change adds truncated SHA512/224 and SHA512/256 algorithms specified in FIPS 180-4. Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: add mention about aligning data to cachelines for best performanceJussi Kivilinna2019-03-241-0/+6
| | | | | | | | | * doc/gcrypt.text: Add mention about aligning data to cachelines for best performance. -- GnuPG-bug-id: 2388 Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc/gcrypt.texi: update HW feature listJussi Kivilinna2019-03-231-0/+7
| | | | | | | * doc/gcrypt.texi: Update FW feature list. -- Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
* doc: Fix library initialization examplesAndreas Metzler2018-11-191-6/+10
| | | | Signed-off-by: Andreas Metzler <ametzler@bebt.de>
* doc: Update yat2m.c from upstream (libgpg-error)Werner Koch2018-10-241-12/+30
| | | | | | | -- GnuPG-bug-id: 4102 Signed-off-by: Werner Koch <wk@gnupg.org>
* doc: Fix example for gcry_sexp_extract_paramWerner Koch2018-10-231-4/+5
| | | | --
* RFC-8439 was published.NIIBE Yutaka2018-07-041-1/+1
| | | | | | * cipher/cipher-poly1305.c: Update RFC reference. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* doc: Clarify the value range of the use-rsa-e parameter.Werner Koch2018-03-221-1/+3
| | | | | | -- Signed-off-by: Werner Koch <wk@gnupg.org>
View Lorry Controller Status