--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2015-7186
2015-07-14 14:54:45
--------------------------------------------------------------------------------
Name : libsodium
Product : Fedora EPEL 7
Version : 1.0.3
Release : 1.el7
URL :
http://libsodium.org/
Summary : The Sodium crypto library
Description :
Sodium is a new, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. It is a portable, cross-compilable,
installable, packageable fork of NaCl, with a compatible API, and an extended
API to improve usability even further. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools. The design
choices emphasize security, and "magic constants" have clear rationales.
The same cannot be said of NIST curves, where the specific origins of certain
constants are not described by the standards. And despite the emphasis on
higher security, primitives are faster across-the-board than most
implementations of the NIST standards.
--------------------------------------------------------------------------------
Update Information:
* In addition to sodium_bin2hex(), sodium_hex2bin() is now a constant-time function.
* crypto_stream_xsalsa20_ic() has been added.
* crypto_generichash_statebytes(), crypto_auth_*_statebytes() and
crypto_hash_*_statebytes() have been added in order to retrieve the size of structures
keeping states from foreign languages.
* The JavaScript target doesn't require /dev/urandom or an external randombytes()
implementation any more. Other minor Emscripten-related improvements have been made in
order to support libsodium.js
* Custom randombytes implementations do not need to provide their own implementation of
randombytes_uniform() any more. randombytes_stir() and randombytes_close() can also be
NULL pointers if they are not required.
* On Linux, getrandom(2) is being used instead of directly accessing /dev/urandom, if the
kernel supports this system call.
* crypto_box_seal() and crypto_box_seal_open() have been added.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1220088 - libsodium-1.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1220088
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libsodium' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------