linux/meta-openembedded.git/meta-oe/recipes-crypto/libsodium, branch master-next

libsodium: upgrade 1.0.21 -> 1.0.22

2026-04-14T15:59:32+00:00

0001-Fix-compilation-with-GCC-on-aarch64.patch removed since it's included in 1.0.22 Changelog: ============ - Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the 'crypto_kem_mlkem768_*()' functions. - X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection against both classical and quantum adversaries, is available through the 'crypto_kem_*()' functions. X-Wing is the recommended KEM for most applications. - SHA-3 hash functions are now available as 'crypto_hash_sha3256_*()' and 'crypto_hash_sha3512_*()', with both one-shot and streaming APIs. - Performance: NEON optimizations for Argon2 on ARM platforms. - Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when available on ARM platforms. - Performance: WebAssembly SIMD implementations of Argon2 have been added. - Emscripten: LTO is now disabled. With Emscripten 4, LTO produced WebAssembly modules with functions that ran significantly slower than without it. - Emscripten: a new option allows compilation with SIMD support. - Emscripten: native ESM module generation is now supported. - JavaScript sumo builds now allow up to 80 MiB memory usage, so that 'crypto_pwhash' with the interactive settings can be used in pure JavaScript, not just WebAssembly. - XOF state alignment has been relaxed. - 'crypto_core_keccak1600_state' has been added. - Export missing 'crypto_ipcrypt_nd_keygen()' helper function. - 'crypto_auth_hmacsha256_init' and 'crypto_auth_hmacsha512_init' now accept NULL key pointers (with a zero key length), for consistency with other '_init' functions. - apple-xcframework: headers are now in a Clibsodium subdirectory to prevent module.modulemap collisions with other xcframeworks. - Fixed compilation with GCC on aarch64 and gcc 4.x. - On aarch64, aes256-gcm is now enabled even when not using clang, including MSVC. - Added compatibility with Visual Studio 2026 when toolsets do not define PlatformToolsetVersion. - Libsodium can be directly used as a dependency in a Zig project. - Performance of MSVC builds has been improved. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

libsodium: mark CVE-2025-69277 patched

2026-03-18T21:33:31+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69277 The vulnerability has been fixed[1] since version 1.0.20, but NVD tracks it without version info. Mark it patched explicitly. [1]: https://github.com/jedisct1/libsodium/commit/f2da4cd8cb26599a0285a6ab0c02948e361a674a Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

libsodium: upgrade 1.0.20 -> 1.0.21

2026-03-18T21:33:28+00:00

License-Update: copyright years refreshed Removed patch included in this release Add path to fix compilation with gcc on aarch64 Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE Changes: Version 1.0.21 - security fix for the crypto_core_ed25519_is_valid_point() function - new crypto_ipcrypt_* functions - sodium_bin2ip and sodium_ip2bin helper functions - XOF: the crypto_xof_shake* and crypto_xof_turboshake* functions Version 1.0.20-stable - XCFramework: cross-compilation is now forced on Apple Silicon to avoid Rosetta-related build issues - The Fil-C compiler is supported out of the box - The CompCert compiler is supported out of the box - MSVC 2026 (Visual Studio 2026) is now supported - Zig builds now support FreeBSD targets - Performance of AES256-GCM and AEGIS on ARM has been improved with some compilers - Android binaries have been added to the NuGet package - Windows ARM binaries have been added to the NuGet package - The Android build script has been improved. The base SDK is now 27c, and the default platform is 21, supporting 16 KB page sizes. - The library can now be compiled with Zig 0.15 and Zig 0.16 - Zig builds now generate position-independent static libraries by default on targets that support PIC - arm64e builds have been added to the XCFramework packages - XCFramework packages are now full builds instead of minimal builds - MSVC builds have been enabled for ARM64 - iOS 32-bit (armv7/armv7s) support has been removed from the XCFramework build script - Security: optblockers have been introduced in critical code paths to prevent compilers from introducing unwanted side channels via conditional jumps. This was observed on RISC-V targets with specific compilers and options. - Security: crypto_core_ed25519_is_valid_point() now properly rejects small-order points that are not in the main subgroup - ((nonnull)) attributes have been relaxed on some crypto_stream* functions to allow NULL output buffers when the output length is zero - A cross-compilation issue with old clang versions has been fixed - JavaScript: support for Cloudflare Workers has been added - JavaScript: WASM_BIGINT is forcibly disabled to retain compatibility with older runtimes - A compilation issue with old toolchains on Solaris has been fixed - crypto_aead_aes256gcm_is_available is exported to JavaScript - libsodium is now compatible with Emscripten 4.x - Security: memory fences have been added after MAC verification in AEAD to prevent speculative access to plaintext before authentication is complete - Assembly files now include .gnu.property notes for proper IBT and Shadow Stack support when building with CET instrumentation. Signed-off-by: Andrej Kozemcak Signed-off-by: Khem Raj

libsodium: patch CVE-2025-69277

2026-01-12T18:25:55+00:00

Pick patch per [1]. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-69277 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

libsodium: upgrade 1.0.19 -> 1.0.20

2024-06-07T16:11:58+00:00

License-Update: Copyright year updated to 2024. 0001-fix-aarch64-Move-target-pragma-after-arm_neon.h-incl.patch removed since it's included in 1.0.20 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

libsodium: Fix build with clang on aarch64

2023-11-06T16:49:52+00:00

Signed-off-by: Khem Raj

libsodium: upgrade 1.0.18 -> 1.0.19

2023-11-06T16:49:52+00:00

License-Update: Copyright years changed Signed-off-by: Khem Raj

libsodium: upgrade 1.0.17 -> 1.0.18

2019-08-03T01:04:41+00:00

Signed-off-by: Zang Ruochen Signed-off-by: Khem Raj

libsodium: update to 1.0.17

2019-03-15T20:57:47+00:00

License checkusm has been changed due to the copiright year change in the LICENSE file. Signed-off-by: Oleksandr Kravchuk Signed-off-by: Khem Raj

libsodium: update to 1.0.16

2018-06-14T16:01:12+00:00

Added link to bug tracker and updated md5sum of LICENSE, which has been updated with the copyright year. Signed-off-by: Oleksandr Kravchuk Signed-off-by: Khem Raj