Fedora 24 Update: libsodium-1.0.10-1.fc24

updates at fedoraproject.org updates at fedoraproject.org
Tue Apr 12 09:52:57 UTC 2016

Fedora Update Notification
2016-04-12 09:36:30.966822

Name        : libsodium
Product     : Fedora 24
Version     : 1.0.10
Release     : 1.fc24
URL         : http://libsodium.org/
Summary     : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.

The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.

Update Information:

**Version 1.0.10**   *    This release only fixes a compilation issue reported
with some older gcc versions. There are no functional changes over the previous
release.  ---  **Version 1.0.9**    * The Javascript target now includes a
|--sumo| option to include all the     symbols of the original C library.   * A
detached API was added to the ChaCha20-Poly1305 and AES256-GCM
implementations.   * The Argon2i password hashing function was added, and is
accessible directly     and through a new, high-level |crypto_pwhash| API. The
scrypt function     remains available as well.   * A speed-record AVX2
implementation of BLAKE2b was added (thanks to Samuel     Neves).   * The
library can now be compiled using C++Builder (thanks to jcolli44)   *
Countermeasures for Ed25519 signatures malleability have been added to match
the irtf-cfrg-eddsa draft (note that malleability is irrelevant to the
standard definition of signature security). Signatures with a small-order
|R| point are now also rejected.   * Some implementations are now slightly
faster when using the Clang compiler.   * The HChaCha20 core function was
implemented (|crypto_core_hchacha20()|).   * No-op stubs were added for all
AES256-GCM public functions even when     compiled on non-Intel platforms.   *
|crypt_generichash_blake2b_statebytes()| was added.   * New macros were added
for the IETF variant of the ChaCha20-Poly1305     construction.   * The library
can now be compiled on Minix.   * HEASLR is now enabled on MinGW builds.

This update can be installed with the "yum" update program. Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at

More information about the package-announce mailing list