summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWang Mingyu <wangmy@fujitsu.com>2026-04-14 18:38:23 +0800
committerKhem Raj <khem.raj@oss.qualcomm.com>2026-04-14 08:59:32 -0700
commite5546d6d09eeb1bfa76437e9d26d1864db18f489 (patch)
tree007a4f635865a695876734672e515ee3157684cb
parent541345b393c38cabfb62a317d0f6ecd7452adce6 (diff)
downloadmeta-openembedded-e5546d6d09eeb1bfa76437e9d26d1864db18f489.tar.gz
libsodium: upgrade 1.0.21 -> 1.0.22
0001-Fix-compilation-with-GCC-on-aarch64.patch removed since it's included in 1.0.22 Changelog: ============ - Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the 'crypto_kem_mlkem768_*()' functions. - X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection against both classical and quantum adversaries, is available through the 'crypto_kem_*()' functions. X-Wing is the recommended KEM for most applications. - SHA-3 hash functions are now available as 'crypto_hash_sha3256_*()' and 'crypto_hash_sha3512_*()', with both one-shot and streaming APIs. - Performance: NEON optimizations for Argon2 on ARM platforms. - Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when available on ARM platforms. - Performance: WebAssembly SIMD implementations of Argon2 have been added. - Emscripten: LTO is now disabled. With Emscripten 4, LTO produced WebAssembly modules with functions that ran significantly slower than without it. - Emscripten: a new option allows compilation with SIMD support. - Emscripten: native ESM module generation is now supported. - JavaScript sumo builds now allow up to 80 MiB memory usage, so that 'crypto_pwhash' with the interactive settings can be used in pure JavaScript, not just WebAssembly. - XOF state alignment has been relaxed. - 'crypto_core_keccak1600_state' has been added. - Export missing 'crypto_ipcrypt_nd_keygen()' helper function. - 'crypto_auth_hmacsha256_init' and 'crypto_auth_hmacsha512_init' now accept NULL key pointers (with a zero key length), for consistency with other '_init' functions. - apple-xcframework: headers are now in a Clibsodium subdirectory to prevent module.modulemap collisions with other xcframeworks. - Fixed compilation with GCC on aarch64 and gcc 4.x. - On aarch64, aes256-gcm is now enabled even when not using clang, including MSVC. - Added compatibility with Visual Studio 2026 when toolsets do not define PlatformToolsetVersion. - Libsodium can be directly used as a dependency in a Zig project. - Performance of MSVC builds has been improved. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
-rw-r--r--meta-oe/recipes-crypto/libsodium/libsodium/0001-Fix-compilation-with-GCC-on-aarch64.patch49
-rw-r--r--meta-oe/recipes-crypto/libsodium/libsodium_1.0.22.bb (renamed from meta-oe/recipes-crypto/libsodium/libsodium_1.0.21.bb)6
2 files changed, 2 insertions, 53 deletions
diff --git a/meta-oe/recipes-crypto/libsodium/libsodium/0001-Fix-compilation-with-GCC-on-aarch64.patch b/meta-oe/recipes-crypto/libsodium/libsodium/0001-Fix-compilation-with-GCC-on-aarch64.patch
deleted file mode 100644
index c5c0d12b87..0000000000
--- a/meta-oe/recipes-crypto/libsodium/libsodium/0001-Fix-compilation-with-GCC-on-aarch64.patch
+++ /dev/null
@@ -1,49 +0,0 @@
1From fc66d1bd0d3db6392424a1fd10dcf4343ce72c52 Mon Sep 17 00:00:00 2001
2From: Frank Denis <github@pureftpd.org>
3Date: Wed, 7 Jan 2026 12:00:49 +0100
4Subject: [PATCH] Fix compilation with GCC on aarch64
5
6Use unsigned NEON intrinsics everywhere
7
8Fixes #1502
9
10Upstream-Status: Backport [https://github.com/jedisct1/libsodium/commit/6702f69bef6044163acc7715e6ac7e430890ce78]
11---
12 src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c | 14 +++++++-------
13 1 file changed, 7 insertions(+), 7 deletions(-)
14
15diff --git a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
16index c5a27e92..bad4ce38 100644
17--- a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
18+++ b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
19@@ -37,7 +37,7 @@ typedef uint64x2_t BlockVec;
20 # define XOR128_3(a, b, c) veorq_u64(veorq_u64((a), (b)), (c))
21 # define SET64x2(a, b) vsetq_lane_u64((uint64_t) (a), vmovq_n_u64((uint64_t) (b)), 1)
22 # define BYTESHL128(a, b) \
23- vreinterpretq_u64_u8(vextq_s8(vdupq_n_s8(0), vreinterpretq_s8_u64(a), 16 - (b)))
24+ vreinterpretq_u64_u8(vextq_u8(vdupq_n_u8(0), vreinterpretq_u8_u64(a), 16 - (b)))
25
26 # define AES_XENCRYPT(block_vec, rkey) \
27 vreinterpretq_u64_u8( \
28@@ -348,12 +348,12 @@ pfx_set_bit(uint8_t ip16[16], const unsigned int bit_index, const uint8_t bit_va
29 static void
30 pfx_shift_left(uint8_t ip16[16])
31 {
32- BlockVec v = LOAD128(ip16);
33- const BlockVec shl = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
34- const BlockVec msb = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
35- const BlockVec zero = vdupq_n_u8(0);
36- const BlockVec carries = vextq_u8(vreinterpretq_u8_u64(msb), zero, 1);
37- v = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
38+ BlockVec v = LOAD128(ip16);
39+ const uint8x16_t shl = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
40+ const uint8x16_t msb = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
41+ const uint8x16_t zero = vdupq_n_u8(0);
42+ const uint8x16_t carries = vextq_u8(msb, zero, 1);
43+ v = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
44 STORE128(ip16, v);
45 }
46
47--
482.47.3
49
diff --git a/meta-oe/recipes-crypto/libsodium/libsodium_1.0.21.bb b/meta-oe/recipes-crypto/libsodium/libsodium_1.0.22.bb
index a1647d2a30..fbd14a8181 100644
--- a/meta-oe/recipes-crypto/libsodium/libsodium_1.0.21.bb
+++ b/meta-oe/recipes-crypto/libsodium/libsodium_1.0.22.bb
@@ -4,10 +4,8 @@ BUGTRACKER = "https://github.com/jedisct1/libsodium/issues"
4LICENSE = "ISC" 4LICENSE = "ISC"
5LIC_FILES_CHKSUM = "file://LICENSE;md5=4942a8ebbbc7f2212bd68a47df264a4f" 5LIC_FILES_CHKSUM = "file://LICENSE;md5=4942a8ebbbc7f2212bd68a47df264a4f"
6 6
7SRC_URI = "https://download.libsodium.org/libsodium/releases/${BPN}-${PV}.tar.gz \ 7SRC_URI = "https://download.libsodium.org/libsodium/releases/${BPN}-${PV}.tar.gz"
8 file://0001-Fix-compilation-with-GCC-on-aarch64.patch \ 8SRC_URI[sha256sum] = "adbdd8f16149e81ac6078a03aca6fc03b592b89ef7b5ed83841c086191be3349"
9 "
10SRC_URI[sha256sum] = "9e4285c7a419e82dedb0be63a72eea357d6943bc3e28e6735bf600dd4883feaf"
11 9
12 10
13inherit autotools 11inherit autotools