Fedora 22 Update: libsodium-1.0.5-1.fc22

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-103fb7dfc6
2015-11-08 05:28:27.315640
--------------------------------------------------------------------------------

Name        : libsodium
Product     : Fedora 22
Version     : 1.0.5
Release     : 1.fc22
URL         : http://libsodium.org/
Summary     : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.

The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.

--------------------------------------------------------------------------------
Update Information:

#### Version 1.0.5 * Compilation issues on some platforms were fixed: missing
alignment directives were added (required at least on RHEL-6/i386), a workaround
for a VRP bug on gcc/armv7 was added, and the library can now be compiled with
the SunPro compiler. * Javascript target: io.js is not supported any more. Use
nodejs.  #### Version 1.0.4 * Support for AES256-GCM has been added. This
requires a CPU with the aesni and pclmul extensions, and is accessible via the
`crypto_aead_aes256gcm_*()` functions. * The Javascript target doesn't use
`eval()` any more, so that the library can be used in Chrome packaged
applications. * QNX and CloudABI are now supported. * **Support for NaCl has
finally been added.** * ChaCha20 with an extended (96 bit) nonce and a 32-bit
counter has been implemented as `crypto_stream_chacha20_ietf()`,
`crypto_stream_chacha20_ietf_xor()` and `crypto_stream_chacha20_ietf_xor_ic()`.
An IETF-compatible version of ChaCha20Poly1305 is available as
`crypto_aead_chacha20poly1305_ietf_npubbytes()`,
`crypto_aead_chacha20poly1305_ietf_encrypt()` and
`crypto_aead_chacha20poly1305_ietf_decrypt()`. * The `sodium_increment()` helper
function has been added, to increment an arbitrary large number (such as a
nonce). * The `sodium_compare()` helper function has been added, to compare
arbitrary large numbers (such as nonces, in order to prevent replay attacks).
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1272798 - libsodium-1.0.5 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1272798
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------