Fedora 21 Update: libsodium-1.0.3-1.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-11583
2015-07-14 12:24:32
--------------------------------------------------------------------------------

Name        : libsodium
Product     : Fedora 21
Version     : 1.0.3
Release     : 1.fc21
URL         : http://libsodium.org/
Summary     : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.

The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.

--------------------------------------------------------------------------------
Update Information:

* In addition to sodium_bin2hex(), sodium_hex2bin() is now a constant-time function.
* crypto_stream_xsalsa20_ic() has been added.
* crypto_generichash_statebytes(), crypto_auth_*_statebytes() and crypto_hash_*_statebytes() have been added in order to retrieve the size of structures keeping states from foreign languages.
* The JavaScript target doesn't require /dev/urandom or an external randombytes() implementation any more. Other minor Emscripten-related improvements have been made in order to support libsodium.js
* Custom randombytes implementations do not need to provide their own implementation of randombytes_uniform() any more. randombytes_stir() and randombytes_close() can also be NULL pointers if they are not required.
* On Linux, getrandom(2) is being used instead of directly accessing /dev/urandom, if the kernel supports this system call.
* crypto_box_seal() and crypto_box_seal_open() have been added.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 13 2015 Christopher Meng <rpm at cicku.me> - 1.0.3-1
- Update to 1.0.3
* Fri Jan 23 2015 Christopher Meng <rpm at cicku.me> - 1.0.2-1
- Update to 1.0.2
* Sat Nov 22 2014 Christopher Meng <rpm at cicku.me> - 1.0.1-1
- Update to 1.0.1
* Sat Oct 18 2014 Christopher Meng <rpm at cicku.me> - 1.0.0-1
- Update to 1.0.0
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1220088 - libsodium-1.0.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1220088
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------