rbnacl-libsodium 1.0.11 → 1.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a1f8634b661a965ca36badea9bcbec480f7ddd1b
-  data.tar.gz: 9a3e1611067785075e344ba054b24e24c4461246
+  metadata.gz: d624e73db7fb1e7b8c2fdfc6ae44bdcbb138529f
+  data.tar.gz: ddc82abacfe906b8d91fe40ece6ca3e116010f02
 SHA512:
-  metadata.gz: 9bc90e96320f8de6ffa943d7f392d7f03294636290077fa2e03f97b3db5b893dbc5144df022d636665f6049bf029ce2942ec936d38c172dd6d4d25efe500a7dd
-  data.tar.gz: 5db56bacc61fb5458d208ab20e9e898bba5685cae1320defef997153caff6f5cbf588303d6434c414ee867903ae8ef53c921bf37f571e850854c585ee86bf5c8
+  metadata.gz: 4c302de7a7a217d856392add6889936be7cc3c4337cb8c6a240e29a78a60b24e7f70b0b6075fc4c5421f6db66266efaf1656a189a892be311f33a8eec4913ad8
+  data.tar.gz: 3ac499d287a575be204213f4ae34f4909b10c98aad70f5b1713642f478b86026a0b8eb603da17fa061c4d22fb1b42328e977f52ea109d6b426475bc6e97ebb5a

data/CHANGES.md

@@ -1,3 +1,7 @@
+1.0.13 (2017-08-15)
+-------------------
+* Update to libsodium 1.0.13
+
 1.0.11 (2016-11-27)
 -------------------
 * Update to libsodium 1.0.11

data/lib/rbnacl/libsodium/version.rb

@@ -1,5 +1,5 @@
 module RbNaCl
   module Libsodium
-    VERSION = '1.0.11'
+    VERSION = '1.0.13'
   end
 end

data/vendor/libsodium/AUTHORS

@@ -13,8 +13,6 @@ blake2                                 Jean-Philippe Aumasson
 
 chacha20                               Daniel J. Bernstein
 
-salsa20                                Daniel J. Bernstein
-
 chacha20poly1305                       Adam Langley
 
 curve25519                             Daniel J. Bernstein
@@ -29,11 +27,13 @@ ed25519                                Daniel J. Bernstein
 
 poly1305                               Daniel J. Bernstein
 
-siphash                                Jean-Philippe Aumasson
-                                       Daniel J. Bernstein
+salsa20                                Daniel J. Bernstein
 
 scrypt                                 Colin Percival
 
+siphash                                Jean-Philippe Aumasson
+                                       Daniel J. Bernstein
+
 Implementors
 ============
 
@@ -41,25 +41,47 @@ crypto_aead/aes256gcm/aesni            Romain Dolbeau
                                        Frank Denis
 
 crypto_aead/chacha20poly1305           Frank Denis
+crypto_aead/xchacha20poly1305
 
-crypto_core/curve25519                 Daniel J. Bernstein
+crypto_auth/hmacsha256                 Colin Percival
+crypto_auth/hmacsha512
+crypto_auth/hmacsha512256
 
 crypto_box/curve25519xsalsa20poly1305  Daniel J. Bernstein
 
+crypto_box/curve25519xchacha20poly1305 Frank Denis
+
+crypto_core/curve25519                 Daniel J. Bernstein
+
 crypto_core/hchacha20                  Frank Denis
 
 crypto_core/hsalsa20                   Daniel J. Bernstein
-crypto_core/salsa20
-crypto_core/salsa2012
-crypto_core/salsa208
+crypto_core/salsa
+
+crypto_generichash/blake2b             Jean-Philippe Aumasson
+                                       Christian Winnerlein
+                                       Samuel Neves
+                                       Zooko Wilcox-O'Hearn
 
 crypto_hash/sha256                     Colin Percival
 crypto_hash/sha512
 crypto_hash/sha512256
 
-crypto_auth/hmacsha256                 Colin Percival
-crypto_auth/hmacsha512
-crypto_auth/hmacsha512256
+crypto_kdf/blake2b                     Frank Denis
+
+crypto_kx                              Frank Denis
+
+crypto_onetimeauth/poly1305/donna      Andrew "floodyberry" Moon
+crypto_onetimeauth/poly1305/sse2
+
+crypto_pwhash/argon2                   Samuel Neves
+                                       Dmitry Khovratovich
+                                       Jean-Philippe Aumasson
+                                       Daniel Dinu
+                                       Thomas Pornin
+
+crypto_pwhash/scryptsalsa208sha256     Colin Percival
+                                       Alexander Peslyak
 
 crypto_scalarmult/curve25519/ref10     Daniel J. Bernstein
 
@@ -69,6 +91,11 @@ crypto_scalarmult/curve25519/sandy2x   Tung Chou
 
 crypto_secretbox/xsalsa20poly1305      Daniel J. Bernstein
 
+crypto_secretbox/xchacha20poly1305     Frank Denis
+
+crypto_shorthash/siphash24             Jean-Philippe Aumasson
+                                       Daniel J. Bernstein
+
 crypto_sign/ed25519                    Peter Schwabe
                                        Daniel J. Bernstein
                                        Niels Duif
@@ -79,30 +106,15 @@ crypto_stream/aes128ctr                Peter Schwabe
 
 crypto_stream/chacha20/ref             Daniel J. Bernstein
 
-crypto_stream/chacha20/vec             Ted Krovetz
-
-crypto_stream/salsa20                  Daniel J. Bernstein
-crypto_stream/salsa2012
-crypto_stream/salsa208
-crypto_stream/xsalsa20
-
-crypto_shorthash/siphash24             Jean-Philippe Aumasson
+crypto_stream/chacha20/dolbeau         Romain Dolbeau
                                        Daniel J. Bernstein
 
-crypto_generichash/blake2b             Jean-Philippe Aumasson
-                                       Christian Winnerlein
-                                       Samuel Neves
-                                       Zooko Wilcox-O'Hearn
+crypto_stream/salsa20/ref              Daniel J. Bernstein
 
-crypto_onetimeauth/poly1305/donna      Andrew "floodyberry" Moon
-
-crypto_onetimeauth/poly1305/sse2       Andrew "floodyberry" Moon
+crypto_stream/salsa20/xmm6int          Romain Dolbeau
+                                       Daniel J. Bernstein
 
-crypto_pwhash/argon2                   Samuel Neves
-                                       Dmitry Khovratovich
-                                       Jean-Philippe Aumasson
-                                       Daniel Dinu
-                                       Thomas Pornin
+crypto_stream/salsa2012/ref            Daniel J. Bernstein
+crypto_stream/salsa2008/ref
 
-crypto_pwhash/scryptsalsa208sha256     Colin Percival
-                                       Alexander Peslyak
+crypto_stream/xchacha20                Frank Denis

data/vendor/libsodium/ChangeLog

@@ -1,6 +1,67 @@
 
+* Version 1.0.13
+ - Javascript: the sumo builds now include all symbols. They were
+previously limited to symbols defined in minimal builds.
+ - The public `crypto_pwhash_argon2i_MEMLIMIT_MAX` constant was
+incorrectly defined on 32-bit platforms. This has been fixed.
+ - Version 1.0.12 didn't compile on OpenBSD/i386 using the base gcc
+compiler. This has been fixed.
+ - The Android compilation scripts have been updated for NDK r14b.
+ - armv7s-optimized code was re-added to iOS builds.
+ - An AVX2 optimized implementation of the Argon2 round function was
+added.
+ - The Argon2id variant of Argon2 has been implemented. The
+high-level `crypto_pwhash_str_verify()` function automatically detects
+the algorithm and can verify both Argon2i and Argon2id hashed passwords.
+The default algorithm for newly hashed passwords remains Argon2i in
+this version to avoid breaking compatibility with verifiers running
+libsodium <= 1.0.12.
+ - A `crypto_box_curve25519xchacha20poly1305_seal*()` function set was
+implemented.
+ - scrypt was removed from minimal builds.
+ - libsodium is now available on NuGet.
+
+* Version 1.0.12
+ - Ed25519ph was implemented, adding a multi-part signature API
+(`crypto_sign_init()`, `crypto_sign_update()`, `crypto_sign_final_*()`).
+ - New constants and related accessors have been added for Scrypt and
+Argon2.
+ - XChaCha20 has been implemented. Like XSalsa20, this construction
+extends the ChaCha20 cipher to accept a 192-bit nonce. This makes it safe
+to use ChaCha20 with random nonces.
+ - `crypto_secretbox`, `crypto_box` and `crypto_aead` now offer
+variants leveraging XChaCha20.
+ - SHA-2 is about 20% faster, which also gives a speed boost to
+signature and signature verification.
+ - AVX2 implementations of Salsa20 and ChaCha20 have been added. They
+are twice as fast as the SSE2 implementations. The speed gain is
+even more significant on Windows, that previously didn't use
+vectorized implementations.
+ - New high-level API: `crypto_kdf`, to easily derive one or more
+subkeys from a master key.
+ - Siphash with a 128-bit output has been implemented, and is
+available as `crypto_shorthash_siphashx_*`.
+ - New `*_keygen()` helpers functions have been added to create secret
+keys for all constructions. This improves code clarity and can prevent keys
+from being partially initialized.
+ - A new `randombytes_buf_deterministic()` function was added to
+deterministically fill a memory region with pseudorandom data. This
+function can especially be useful to write reproducible tests.
+ - A preliminary `crypto_kx_*()` API was added to compute shared session
+keys.
+ - AVX2 detection is more reliable.
+ - The pthreads library is not required any more when using MingW.
+ - `contrib/Findsodium.cmake` was added as an example to include
+libsodium in a project using cmake.
+ - Compatibility with gcc 2.x has been restored.
+ - Minimal builds can be checked using `sodium_library_minimal()`.
+ - The `--enable-opt` compilation switch has become compatible with more
+platforms.
+ - Android builds are now using clang on platforms where it is
+available.
+
 * Version 1.0.11
- - sodium_init() is now thread-safe, and can be safely called multiple
+ - `sodium_init()` is now thread-safe, and can be safely called multiple
 times.
  - Android binaries now properly support 64-bit Android, targeting
 platform 24, but without breaking compatibility with platforms 16 and
@@ -146,7 +207,7 @@ required.
  - On Linux, getrandom(2) is being used instead of directly accessing
 /dev/urandom, if the kernel supports this system call.
  - crypto_box_seal() and crypto_box_seal_open() have been added.
- - A solutions for Visual Studio 2015 was added.
+ - Visual Studio 2015 is now supported.
 
 * Version 1.0.2
  - The _easy and _detached APIs now support precalculated keys;

data/vendor/libsodium/LICENSE

@@ -1,7 +1,7 @@
 /*
  * ISC License
  *
- * Copyright (c) 2013-2016
+ * Copyright (c) 2013-2017
  * Frank Denis <j at pureftpd dot org>
  *
  * Permission to use, copy, modify, and/or distribute this software for any

data/vendor/libsodium/Makefile.am

@@ -10,6 +10,7 @@ EXTRA_DIST = \
 	THANKS
 
 SUBDIRS = \
+	contrib \
 	dist-build \
 	msvc-scripts \
 	src \

data/vendor/libsodium/Makefile.in

@@ -1,7 +1,7 @@
-# Makefile.in generated by automake 1.15 from Makefile.am.
+# Makefile.in generated by automake 1.15.1 from Makefile.am.
 # @configure_input@
 
-# Copyright (C) 1994-2014 Free Software Foundation, Inc.
+# Copyright (C) 1994-2017 Free Software Foundation, Inc.
 
 # This Makefile.in is free software; the Free Software Foundation
 # gives unlimited permission to copy and/or distribute it,
@@ -90,7 +90,8 @@ build_triplet = @build@
 host_triplet = @host@
 subdir = .
 ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_check_compile_flag.m4 \
+am__aclocal_m4_deps = $(top_srcdir)/m4/ax_check_catchable_segv.m4 \
+	$(top_srcdir)/m4/ax_check_compile_flag.m4 \
 	$(top_srcdir)/m4/ax_check_define.m4 \
 	$(top_srcdir)/m4/ax_check_link_flag.m4 \
 	$(top_srcdir)/m4/ax_pthread.m4 \
@@ -205,9 +206,7 @@ am__DIST_COMMON = $(srcdir)/Makefile.in \
 	$(top_srcdir)/src/libsodium/include/sodium/version.h.in \
 	AUTHORS ChangeLog THANKS build-aux/compile \
 	build-aux/config.guess build-aux/config.sub \
-	build-aux/install-sh build-aux/ltmain.sh build-aux/missing \
-	compile config.guess config.sub depcomp install-sh ltmain.sh \
-	missing
+	build-aux/install-sh build-aux/ltmain.sh build-aux/missing
 DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
 distdir = $(PACKAGE)-$(VERSION)
 top_distdir = $(distdir)
@@ -288,6 +287,10 @@ ECHO_C = @ECHO_C@
 ECHO_N = @ECHO_N@
 ECHO_T = @ECHO_T@
 EGREP = @EGREP@
+ENABLE_VALGRIND_drd = @ENABLE_VALGRIND_drd@
+ENABLE_VALGRIND_helgrind = @ENABLE_VALGRIND_helgrind@
+ENABLE_VALGRIND_memcheck = @ENABLE_VALGRIND_memcheck@
+ENABLE_VALGRIND_sgcheck = @ENABLE_VALGRIND_sgcheck@
 EXEEXT = @EXEEXT@
 FGREP = @FGREP@
 GREP = @GREP@
@@ -338,6 +341,7 @@ SAFECODE_HOME = @SAFECODE_HOME@
 SED = @SED@
 SET_MAKE = @SET_MAKE@
 SHELL = @SHELL@
+SODIUM_LIBRARY_MINIMAL_DEF = @SODIUM_LIBRARY_MINIMAL_DEF@
 SODIUM_LIBRARY_VERSION = @SODIUM_LIBRARY_VERSION@
 SODIUM_LIBRARY_VERSION_MAJOR = @SODIUM_LIBRARY_VERSION_MAJOR@
 SODIUM_LIBRARY_VERSION_MINOR = @SODIUM_LIBRARY_VERSION_MINOR@
@@ -345,10 +349,6 @@ STRIP = @STRIP@
 TEST_LDFLAGS = @TEST_LDFLAGS@
 VALGRIND = @VALGRIND@
 VALGRIND_ENABLED = @VALGRIND_ENABLED@
-VALGRIND_HAVE_TOOL_drd = @VALGRIND_HAVE_TOOL_drd@
-VALGRIND_HAVE_TOOL_exp_sgcheck = @VALGRIND_HAVE_TOOL_exp_sgcheck@
-VALGRIND_HAVE_TOOL_helgrind = @VALGRIND_HAVE_TOOL_helgrind@
-VALGRIND_HAVE_TOOL_memcheck = @VALGRIND_HAVE_TOOL_memcheck@
 VERSION = @VERSION@
 abs_builddir = @abs_builddir@
 abs_srcdir = @abs_srcdir@
@@ -403,6 +403,8 @@ target_alias = @target_alias@
 top_build_prefix = @top_build_prefix@
 top_builddir = @top_builddir@
 top_srcdir = @top_srcdir@
+valgrind_enabled_tools = @valgrind_enabled_tools@
+valgrind_tools = @valgrind_tools@
 ACLOCAL_AMFLAGS = -I m4
 EXTRA_DIST = \
 	autogen.sh \
@@ -414,6 +416,7 @@ EXTRA_DIST = \
 	THANKS
 
 SUBDIRS = \
+	contrib \
 	dist-build \
 	msvc-scripts \
 	src \
@@ -666,7 +669,7 @@ distdir: $(DISTFILES)
 	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
 	|| chmod -R a+r "$(distdir)"
 dist-gzip: distdir
-	tardir=$(distdir) && $(am__tar) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).tar.gz
+	tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz
 	$(am__post_remove_distdir)
 dist-bzip2: distdir
 	tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2
@@ -691,7 +694,7 @@ dist-shar: distdir
 	@echo WARNING: "Support for shar distribution archives is" \
 	               "deprecated." >&2
 	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	shar $(distdir) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).shar.gz
+	shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz
 	$(am__post_remove_distdir)
 
 dist-zip: distdir
@@ -709,7 +712,7 @@ dist dist-all:
 distcheck: dist
 	case '$(DIST_ARCHIVES)' in \
 	*.tar.gz*) \
-	  GZIP=$(GZIP_ENV) gzip -dc $(distdir).tar.gz | $(am__untar) ;;\
+	  eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).tar.gz | $(am__untar) ;;\
 	*.tar.bz2*) \
 	  bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
 	*.tar.lz*) \
@@ -719,7 +722,7 @@ distcheck: dist
 	*.tar.Z*) \
 	  uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
 	*.shar.gz*) \
-	  GZIP=$(GZIP_ENV) gzip -dc $(distdir).shar.gz | unshar ;;\
+	  eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).shar.gz | unshar ;;\
 	*.zip*) \
 	  unzip $(distdir).zip ;;\
 	esac

data/vendor/libsodium/README.markdown

@@ -1,6 +1,7 @@
 [![Build Status](https://travis-ci.org/jedisct1/libsodium.svg?branch=master)](https://travis-ci.org/jedisct1/libsodium?branch=master)
 [![Windows build status](https://ci.appveyor.com/api/projects/status/fu8s2elx25il98hj?svg=true)](https://ci.appveyor.com/project/jedisct1/libsodium)
 [![Coverity Scan Build Status](https://scan.coverity.com/projects/2397/badge.svg)](https://scan.coverity.com/projects/2397)
+[![Make a donation to support this project](https://img.shields.io/badge/donate-PayPal-green.svg?style=flat)](https://www.libsodium.org/donate)
 
 ![libsodium](https://raw.github.com/jedisct1/libsodium/master/logo.png)
 ============

data/vendor/libsodium/THANKS

@@ -1,47 +1,81 @@
 @alethia7
+@artemisc
+@carblue
 @dnaq
+@ektrah
+@graxrabble
 @harleqin
 @joshjdevl
+@jrmarino
 @jshahbazi
 @lvh
 @neheb
+
+Adam Caudill (@adamcaudill)
+Alexander Morris (@alexpmorris)
 Amit Murthy (@amitmurthy)
+Andrew Bennett (@potatosalad)
+Andrew Lambert (@charonn0)
+Bruce Mitchener (@waywardmonkeys)
 Bruno Oliveira (@abstractj)
-Christian Wiese (@morfoh)
+Caolan McMahon (@caolan)
 Chris Rebert (@cvrebert)
+Christian Hermann (@bitbeans)
+Christian Wiese (@morfoh)
+Christian Wiese (@morfoh)
 Colm MacCárthaigh (@colmmacc)
+David Parrish (@dmp1ce)
 Donald Stufft (@dstufft)
 Douglas Campos (@qmx)
 Drew Crawford (@drewcrawford)
+Emil Bay (@emilbayes)
 Eric Dong (@quantum1423)
 Eric Voskuil (@evoskuil)
+Farid Hajji (@fhajji)
 Frank Siebenlist (@franks42)
 Gabriel Handford (@gabriel)
+Geo Carncross (@geocar)
+Henrik Gassmann (BurningEnlightenment)
 Jachym Holecek (@freza)
+Jack Wink (@jackwink)
+James Ruan (@jamesruan)
 Jan de Muijnck-Hughes (@jfdm)
 Jason McCampbell (@jasonmccampbell)
 Jeroen Habraken (@VeXocide)
+Jeroen Ooms (@jeroen)
 Jesper Louis Andersen (@jlouis)
+Joe Eli McIlvain (@jemc)
 Joseph Abrahamson (@tel)
+Julien Kauffmann (@ereOn)
 Kenneth Ballenegger (@kballenegger)
 Loic Maury (@loicmaury)
 Michael Gorlick (@mgorlick)
 Michael Gregorowicz (@mgregoro)
+Michał Zieliński (@zielmicha)
 Omar Ayub (@electricFeel)
 Pedro Paixao (@paixaop)
 Project ArteMisc (@artemisc)
+Rich FitzJohn (@richfitz)
 Ruben De Visscher (@rubendv)
 Rudolf Von Krugstein (@rudolfvonkrugstein)
 Samuel Neves (@sneves)
 Scott Arciszewski (@paragonie-scott)
-Stefan Marsiske
+Stanislav Ovsiannikov (@naphaso)
+Stefan Marsiske (@stef)
 Stephan Touset (@stouset)
+Stephen Chavez (@redragonx)
 Steve Gibson (@sggrc)
 Tony Arcieri (@bascule)
 Tony Garnock-Jones (@tonyg)
 Y. T. Chung (@zonyitoo)
 
-FSF France
+Bytecurry Software
+Cisco
 Coverity, Inc.
-OpenDNS, Inc.
+Cryptotronix
+FSF France
+MaidSafe
 OVH
+Paragonie Initiative Enterprises
+Python Cryptographic Authority
+