ANNOUNCE: Nettle-3.10

I'm happy to announce a new release of GNU Nettle, a low-level
cryptographics library. This release adds support for RSA-OAEP, and
improves performance mainly for powerpc64. See NEWS entries below.

The Nettle home page can be found at
https://www.lysator.liu.se/~nisse/nettle/, and the manual at
https://www.lysator.liu.se/~nisse/nettle/nettle.html.

The release can be downloaded from

  https://ftp.gnu.org/gnu/nettle/nettle-3.10.tar.gz
  https://www.lysator.liu.se/~nisse/archive/nettle-3.10.tar.gz

Happy hacking,
/Niels Möller

NEWS for the Nettle 3.10 release

	This is a maintenance release, including a few each of bug
	fixes, new features and optimizations.

	The new version is intended to be fully source and binary
	compatible with Nettle-3.6. The shared library names are
	libnettle.so.8.9 and libhogweed.so.6.9, with sonames
	libnettle.so.8 and libhogweed.so.6.

	Bug fixes:

	* Add missing hash functions sha512_224 and sha512_256 to the
	  nettle_get_hashes() list. The name values in the
	  corresponding nettle_hash structs also changed to use
	  underscore instead of dash, for consistency.

	* Fix a few cases of formally undefined calls to memcpy(dst,
	  NULL, 0), resulting from valid calls to, e.g.,
	  sha256_update(ctx, 0, NULL).

	New features:

	* Support RSA-OAEP encryption. Contributed by Nicolas Mora and
	  Daiki Ueno.

	* New function sha3_256_shake_output, new functions
	  sha3_128_init, sha3_128_update, sha3_128_shake,
	  sha3_128_shake_output. Contributed by Daiki Ueno.

	* Added DRBG-CTR with AES256, contributed by Simon Josefsson.

	Optimizations:

	* New combined gcm-aes assembly for powerpc64, contributed by
	  Danny Tsen.

	* New sha256 assembly for powerpc64, contributed by Eric
          Richter.

	* Improved performance for powerpc64 AES decrypt, by skipping
	  subkey transformations that don't suit the vncipher
	  instructions.

	* Add arm64 CPU feature detection for Android and for Apple systems,
	  contributed by Foolbar and Tim Kosse, prespectively.

	Miscellaneous:

	* New tests for side-channel silence, based on valgrind.

	* Delete all md5 assembly code. Delete all sparc32 assembly code.

-- 
Niels Möller. PGP key CB4962D070D77D7FCB8BA36271D8F1FF368C6677.
Internet email is subject to wholesale government surveillance.