Fedora 22 Update: libsodium-1.0.3-1.fc22

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-11608
2015-07-14 12:26:07
--------------------------------------------------------------------------------

Name        : libsodium
Product     : Fedora 22
Version     : 1.0.3
Release     : 1.fc22
URL         : http://libsodium.org/
Summary     : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.

The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.

--------------------------------------------------------------------------------
Update Information:

* In addition to sodium_bin2hex(), sodium_hex2bin() is now a constant-time function.
* crypto_stream_xsalsa20_ic() has been added.
* crypto_generichash_statebytes(), crypto_auth_*_statebytes() and crypto_hash_*_statebytes() have been added in order to retrieve the size of structures keeping states from foreign languages.
* The JavaScript target doesn't require /dev/urandom or an external randombytes() implementation any more. Other minor Emscripten-related improvements have been made in order to support libsodium.js
* Custom randombytes implementations do not need to provide their own implementation of randombytes_uniform() any more. randombytes_stir() and randombytes_close() can also be NULL pointers if they are not required.
* On Linux, getrandom(2) is being used instead of directly accessing /dev/urandom, if the kernel supports this system call.
* crypto_box_seal() and crypto_box_seal_open() have been added.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 13 2015 Christopher Meng <rpm at cicku.me> - 1.0.3-1
- Update to 1.0.3
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.0.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1220088 - libsodium-1.0.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1220088
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------