--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-71208a49bb
2019-01-23 00:45:11.942705
--------------------------------------------------------------------------------
Name : libsodium
Product : Fedora EPEL 7
Version : 1.0.17
Release : 1.el7
URL :
http://libsodium.org/
Summary : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.
The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.
--------------------------------------------------------------------------------
Update Information:
** Version 1.0.17** - Bug fix: `sodium_pad()` didn't properly support block
sizes >= 256 bytes. - JS/WebAssembly: some old iOS versions can't instantiate
the WebAssembly module; fall back to Javascript on these. - JS/WebAssembly:
compatibility with newer Emscripten versions. - Bug fix:
`crypto_pwhash_scryptsalsa208sha256_str_verify()` and
`crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()` didn't return `EINVAL`
on input strings with a short length, unlike their high-level counterpart. -
Added a workaround for Visual Studio 2010 bug causing CPU features not to be
detected. - Portability improvements. - Test vectors from Project Wycheproof
have been added. - New low-level APIs for arithmetic mod the order of the prime
order group: `crypto_core_ed25519_scalar_random()`,
`crypto_core_ed25519_scalar_reduce()`, `crypto_core_ed25519_scalar_invert()`,
`crypto_core_ed25519_scalar_negate()`,
`crypto_core_ed25519_scalar_complement()`, `crypto_core_ed25519_scalar_add()`
and `crypto_core_ed25519_scalar_sub()`. - New low-level APIs for scalar
multiplication without clamping: `crypto_scalarmult_ed25519_base_noclamp()` and
`crypto_scalarmult_ed25519_noclamp()`. These new APIs are especially useful for
blinding. - `sodium_sub()` has been implemented. - Support for WatchOS has
been added. - getrandom(2) is now used on FreeBSD 12+. - The `nonnull`
attribute has been added to all relevant prototypes. - More reliable AVX512
detection. - Javascript/Webassembly builds now use dynamic memory growth.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------