summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-crypto/botan
Commit message (Collapse)AuthorAgeFilesLines
* botan: Make it reproducibleKhem Raj2024-08-151-4/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 3.4.0 -> 3.5.0Wang Mingyu2024-07-151-2/+2
| | | | | | | | | | | | | | License-Update: Copyright year updated to 2024. Changelog: ========== * CVE-2024-34702: Fix a DoS caused by excessive name constraints. * CVE-2024-39312: Fix a name constraint processing error, where if permitted and excluded rules both applied to a certificate, only the permitted rules would be checked. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 3.2.0 -> 3.4.0Wang Mingyu2024-06-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Add Ed448 signatures and X448 key exchange - X.509 certificate verification now can optionally ignore the expiration date of root certificates. - Support for "hybrid" EC point encoding is now deprecated. - Support for creating EC_Group objects with parameters larger than 521 bits is now deprecated - Add new build options to disable deprecated features, and to enable experimental features. - Fix a bug affecting use of SIV and CCM ciphers in the FFI interface. - Add new FFI interface botan_cipher_requires_entire_message - Internal refactorings of the mp layer to support a new elliptic curve library. - Use a new method for constant time division in Kyber to avoid a possible side channel where the compiler inserts use of a variable time division. - Refactor test RNG usage to improve reproducibility. - Add std::span interfaces to BigInt - Refactorings and improvements to low level load/store utility functions. - Fix the amalgamation build on ARM64 - Add Mac ARM based CI build - Fix a thread serialization bug that caused sporadic test failures. - Update GH Actions to v4 - Add examples of password based encryption and HTTPS+ASIO client. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.19.3 -> 3.2.0alperak2023-11-171-3/+3
| | | | | | | | | | | | | | License-Update: Copyright year updated. Changelog: https://botan.randombit.net/news.html#version-3-0-0-2023-04-11 https://botan.randombit.net/news.html#version-3-1-0-2023-07-11 https://botan.randombit.net/news.html#version-3-1-1-2023-07-13 https://botan.randombit.net/news.html#version-3-2-0-2023-10-09 Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.19.2 -> 2.19.3Chen Pei2022-11-251-1/+1
| | | | | | | | | | Version 2.19.3, 2022-11-16 CVE-2022-43705: A malicious OCSP responder could forge OCSP responses due to a failure to validate that an embedded certificate was issued by the end-entity issuing certificate authority. Signed-off-by: Chen Pei <cp0613@linux.alibaba.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.19.1 -> 2.19.2Wang Mingyu2022-06-061-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.18.2 -> 2.19.1wangmy2022-01-251-2/+2
| | | | | | | | | | | | License-Update: year updated to 2022. Changelog: ========= Fix a compilation problem affecting macOS XCode (GH #2880) Fix a build problem preventing amalgamation builds in 2.19.0 (GH #2879) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.18.1 -> 2.18.2wangmy2021-11-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Version 2.18.2, 2021-10-25 Avoid using short exponents when encrypting in ElGamal, as some PGP implementations generate keys with parameters that are weak when short exponents are used (GH #2794) Fix a low risk OAEP decryption side channel (GH #2797) Work around a miscompilation of SHA-3 caused by a bug in Clang 12 and XCode 13. (GH #2826) Remove support in OpenSSL provider for algorithms which are disabled by default in OpenSSL 3.0 (GH #2823, #2814) Add CI based on GitHub actions to replace Travis CI (GH #2632) Fix the online OCSP test, as the certificate involved had expired. (GH #2799) Fix some test failures induced by the expiration of the trust root "DST Root CA X3" (GH #2820) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-6/+6
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* botan: upgrade 2.14.0 -> 2.18.1Andreas Müller2021-05-241-2/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Mark incompatible with riscv32Khem Raj2020-11-151-0/+2
| | | | | | CPU is not supported _yet_ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.13.0 -> 2.14.0Pierre-Jean Texier2020-04-081-2/+2
| | | | | | | See full changelog https://botan.randombit.net/news.html#version-2-14-0-2020-04-06 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Define --libdir to fix multilib build issuesKhem Raj2020-03-171-2/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.11.0 -> 2.13.0Wang Mingyu2020-01-071-3/+3
| | | | | | | -License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: update to 2.11.0Oleksandr Kravchuk2019-09-161-7/+4
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Upgrade to 2.9.0Khem Raj2019-01-301-7/+5
| | | | | | | | | | License-Update: Update copyright years to 2019 https://github.com/randombit/botan/commit/d5edb39e968893bafe87a6a5ef12af45914c0d70#diff-98cd14c95bb22f9d397da0603a77d950 Swith to tarball fetcher Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Add recipeKhem Raj2018-09-291-0/+55
botan is a common crypto library used by various infrastructures e.g. qtcreator chromium etc. Its beneficial to build it once for the system and let apps use it if possible Signed-off-by: Khem Raj <raj.khem@gmail.com>