X-Git-Url: https://git.distorted.org.uk/~mdw/catacomb/blobdiff_plain/8276a9c565bc29afbc6cc120dfde0801c06c2bbd..ce7001d8ef72928ff966e3c9da1c62ce1d00d2c0:/debian/changelog diff --git a/debian/changelog b/debian/changelog index 265161f7..6079fd7a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,85 @@ +catacomb (2.4.5) experimental; urgency=medium + + * catacomb: Fix memory leak in key-file error handling. + * catacomb: Don't leak internal `exptime' symbol into the global + namespace. + * catacomb: Check that the X86 `rdrand' instruction actually works + before leaning on it. This is in response to the well-publicized AMD + bug which always returns all-bits-set with the carry /set/ (indicating + success). + * catacomb: Mix in the random pool key during `rand_gate' and + `rand_stretch' operations. + * catacomb: Fix by-tag key lookups: if the query string looks like a hex + number, it's treated as a search by id; but if no such id is found, + the search wouldn't continue to look for a key by type or tag. + * catacomb: Fix reference leak in `key_split'. + * catacomb: Fix bug which completely broke `key_copydata'. + * catacomb: Fix segfault from `pgen', if it fails before setting up the + prime tester. + * catacomb: Propagate failure from `pgen' during Lim--Lee prime + generation, rather than immediately retrying. + * catacomb: Fix memory leak of factor vector from failed Lim--Lee prime + generation. + * catacomb: Fix segfault when multiplying the identity elliptic-curve + point. + * catacomb: Fix the `lcrand' descriptor, so that it's not advertised as + being cryptographically strong, and to fix a bias in its output. + * catacomb: Fix a memory leak in the error case of KCDSA prime + generation. + * catacomb-bin: Fix segfault from `pixie', if given an empty passphrase + to remember. + * catacomb: Check SIMD feature bit on ARM64 before using the optimized + code. I don't know of any ARM64 implementations which lack SIMD + instructions, but the bit must be there for a reason, so I might as + well use it. + * catacomb: Support parsing binary-group descriptions. This is a long- + standing lacuna that I've only recently noticed. + + -- Mark Wooding Sat, 09 May 2020 17:46:24 +0100 + +catacomb (2.4.4) experimental; urgency=medium + + * debian: Bump to Debhelper 10. + * debian: Ship a shared-library `symbols' file for more precise + dependencies. + + -- Mark Wooding Sun, 29 Sep 2019 15:58:26 +0100 + +catacomb (2.4.3) experimental; urgency=medium + + * catacomb (idea): Fix key-length descriptor. + * catacomb (xchachaNN): Fix nonce-size descriptor. + * catacomb (key-management): Fix incorrect handling of keyring + modifiability. + * catacomb-dev: Configure `pkg-config' correctly for static linking. + * catacomb, catacomb-bin (cookie, dsig): Fix hash-function length + padding on very long messages, and handling of large datestamps. + * catacomb-bin (catsign): Don't open temporary files unnecessarily. + * catacomb-bin (catcrypt): Fix key-attribute parsing. + * catacomb-bin (perftest): Add missing help-string text for `-n' used + with `enc' and `hash' + + -- Mark Wooding Sat, 21 Sep 2019 17:43:59 +0100 + +catacomb (2.4.2) experimental; urgency=medium + + * catacomb2: Support multi-arch at last. + * catacomb2: Fix mangled key-size data for HMAC. + * rspit: Support generating large files. + * pixie: Improve error-handling around dropping privilege. + * ed25519, ed448: Very minor performance improvement. + * salsa20, chacha: Fix crash if nonce is none, as it is when invoked by + `rspit'. + * salsa20, chacha: Fix declaration of cipher classes to prevent them + ending up as (useless) common symbols in client code. + * limlee: Improve the prime size heuristics. + * sha, sha256, sha512: Restructure compression function to improve + performance and use less memory. + * rijndael: Include enough round constants to make very tiny keys work + correctly. + + -- Mark Wooding Tue, 12 Jun 2018 01:15:59 +0100 + catacomb (2.4.1) experimental; urgency=low * catacomb2: Two's-complement fix from 2.3.x release branch.