1 Noteworthy changes in version 1.5.x (unreleased)
2 ------------------------------------------------
4 * New cipher algorithm mode for AES-WRAP.
6 * Fixed minor memory leak in DSA key generation.
8 * No more switching to FIPS mode if /proc/version is not readable.
10 * Fixed sigill during Padlock detection on old CPUs.
12 * Fixed a hang on some W2000 machines.
14 * Boosted SHA-512 performance by 30% on ia32 boxes and gcc 4.3;
15 SHA-256 went up by 25%.
17 * Support for WindowsCE.
19 * Interface changes relative to the 1.4.2 release:
20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
21 GCRY_CIPHER_MODE_AESWRAP NEW.
25 Noteworthy changes in version 1.4.4 (2009-01-22)
26 ------------------------------------------------
28 * Publish GCRY_MODULE_ID_USER and GCRY_MODULE_ID_USER_LAST constants.
29 This functionality has been in Libgcrypt since 1.3.0.
31 * MD5 may now be used in non-enforced fips mode.
33 * Fixed HMAC for SHA-384 and SHA-512 with keys longer than 64 bytes.
35 * In fips mode, RSA keys are now generated using the X9.31 algorithm
36 and DSA keys using the FIPS 186-2 algorithm.
38 * The transient-key flag is now also supported for DSA key
39 generation. DSA domain parameters may be given as well.
42 Noteworthy changes in version 1.4.3 (2008-09-18)
43 ------------------------------------------------
45 * Try to auto-initialize Libgcrypt to minimize the effect of
46 applications not doing that correctly. This is not a perfect
47 solution but given that many applicationion would totally fail
48 without such a hack, we try to help at least with the most common
49 cases. Folks, please read the manual to learn how to properly
52 * Auto-initialize the secure memory to 32k instead of aborting the
55 * Log fatal errors via syslog.
57 * Changed the name and the semantics of the fips mode config file.
59 * Add convenience macro gcry_fips_mode_active.
63 * Documentation cleanups.
66 Noteworthy changes in version 1.4.2 (2008-09-08)
67 ------------------------------------------------
69 * The long missing gcry_mpi_lshift function has been added.
71 * RSA key generation now supports a "transient-key" flag.
73 * The keygrip computation for ECDSA has been implemented thus ECDSA
74 is now fully supported.
76 * A few macros have been replaced by functions for better type
79 * The thread initialization structure now carries version
82 * The manual describes more clearly how to initialize Libgcrypt.
84 * The library may now be switched into a FIPS mode.
86 * Interface changes relative to the 1.3.0 release:
87 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
88 GCRYCTL_OPERATIONAL_P NEW.
89 GCRYCTL_FIPS_MODE_P NEW.
90 GCRYCTL_FORCE_FIPS_MODE NEW.
91 gcry_cipher_setkey NEW: Replaces macro.
92 gcry_cipher_setiv NEW: Replaces macro.
93 gcry_cipher_setctr NEW: Replaces macro.
95 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
98 Noteworthy changes in version 1.4.1 (2008-04-25)
99 ------------------------------------------------
101 * Fixed a bug introduced by 1.3.1 which led to the comsumption of far
102 too much entropy for the intial seeding.
104 * Improved AES performance for CFB and CBC modes.
106 * Removed build problems for the Padlock support.
109 Noteworthy changes in version 1.4.0 (2007-12-10)
110 ------------------------------------------------
112 * New configure option --disable-padlock-support which is mostly
113 useful in case of build problems.
116 Noteworthy changes in version 1.3.2 (2007-12-03)
117 ------------------------------------------------
119 * The visibility attribute is now used if supported by the toolchain.
121 * The ACE engine of VIA processors is now used for AES-128.
123 * The ASN.1 DER template for SHA-224 has been fixed.
126 Noteworthy changes in version 1.3.1 (2007-10-26)
127 ------------------------------------------------
129 * The entire library is now under the LGPL. The helper programs and
130 the manual are under the GPL. Kudos to Peter Gutmann for giving
131 permissions to relicense the rndw32 and rndunix modules.
133 * The Camellia cipher is now under the LGPL and included by default.
135 * Fixed a bug in the detection of symbol prefixes which inhibited the
136 build of optimzied assembler code on certain systems.
138 * Updated the entropy gatherer for W32.
141 Noteworthy changes in version 1.3.0 (2007-05-04)
142 ------------------------------------------------
144 * Changed the way the RNG gets initialized. This allows to keep it
145 uninitialized as long as no random numbers are used. To override
146 this, the new macro gcry_fast_random_poll may be used. It is in
147 general a good idea to spread this macro into the application code
148 to make sure that these polls happen often enough.
150 * Made the RNG immune against fork without exec.
152 * Reading and writing the random seed file is now protected by a
153 fcntl style file lock on systems that provide this function.
155 * Support for SHA-224 and HMAC using SHA-384 and SHA-512.
157 * Support for the SEED cipher.
159 * Support for the Camellia cipher. Note that Camellia is disabled by
160 default, and that enabling it changes the license of libgcrypt from
163 * Support for OFB encryption mode.
165 * gcry_mpi_rshift does not anymore truncate the shift count.
167 * Reserved algorithm ranges for use by applications.
171 * The new function gcry_md_debug should be used instead of the
172 gcry_md_start_debug and gcry_md_stop_debug macros.
174 * New configure option --enable-random-daemon to support a system
175 wide random daemon. The daemon code is experimental and not yet
176 very well working. It will eventually allow to keep a global
177 random pool for the sake of short living processes.
179 * Non executable stack support is now used by default on systems
182 * Support for Microsoft Windows.
184 * Assembler support for the AMD64 architecture.
186 * New configure option --enable-mpi-path for optimized builds.
188 * Experimental support for ECDSA; should only be used for testing.
190 * New control code GCRYCTL_PRINT_CONFIG to print the build
193 * Minor changes to some function declarations. Buffer arguments are
194 now typed as void pointer. This should not affect any compilation.
195 Fixed two bugs in return values and clarified documentation.
197 * Interface changes relative to the 1.2.0 release:
198 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
199 gcry_fast_random_poll NEW
201 gcry_sexp_nth_string NEW
203 GCRY_PK_USAGE_CERT NEW
204 GCRY_PK_USAGE_AUTH NEW
205 GCRY_PK_USAGE_UNKN NEW
208 GCRY_CIPHER_CAMELLIA128 NEW
209 GCRY_CIPHER_CAMELLIA192 NEW
210 GCRY_CIPHER_CAMELLIA256 NEW
211 GCRYCTL_FAKED_RANDOM_P NEW
212 GCRYCTL_PRINT_CONFIG NEW
213 GCRYCTL_SET_RNDEGD_SOCKET NEW.
214 gcry_mpi_scan CHANGED: Argument BUFFER is now void*.
215 gcry_pk_algo_name CHANGED: Returns "?" instead of NULL.
216 gcry_cipher_algo_name CHANGED: Returns "?" instead of "".
217 gcry_pk_spec_t CHANGED: Element ALIASES is now const ptr.
218 gcry_md_write_t CHANGED: Argument BUF is now a const void*.
219 gcry_md_ctl CHANGED: Argument BUFFER is now void*.
220 gcry_cipher_encrypt CHANGED: Arguments IN and OUT are now void*.
221 gcry_cipher_decrypt CHANGED: Arguments IN and OUT are now void*.
222 gcry_sexp_sprint CHANGED: Argument BUFFER is now void*.
223 gcry_create_nonce CHANGED: Argument BUFFER is now void*.
224 gcry_randomize CHANGED: Argument BUFFER is now void*.
225 gcry_cipher_register CHANGED: Argument ALGORITHM_ID is now int*.
226 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
229 Noteworthy changes in version 1.2.0 (2004-04-15)
230 ------------------------------------------------
232 * First stable release.
235 Noteworthy changes in version 1.1.94 (2004-03-29)
236 -------------------------------------------------
238 * The support for multi-threaded users goes into its third
239 incarnation. We removed compile time support for thread libraries.
240 To support the thread library of your choice, you have to set up
241 callback handlers at initialization time. New data structures, a
242 new control command, and default initializers are provided for this
245 * Interface changes relative to the 1.1.93 release:
246 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
247 libgcrypt-config --thread OBSOLETE
248 libgcrypt-pth.la REMOVED
249 libgcrypt-pthread.la REMOVED
250 GCRYCTL_SET_THREAD_CBS NEW
251 struct gcrypt_thread_cbs NEW
252 enum gcry_thread_option NEW
253 GCRY_THREAD_OPTION_PTH_IMPL NEW
254 GCRY_THREAD_OPTION_PTHREAD_IMPL NEW
255 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
257 Noteworthy changes in version 1.1.93 (2004-03-06)
258 -------------------------------------------------
260 * The automatic thread library detection has finally been removed.
261 From now on, only linking explicitely to libgcrypt, libgcrypt-pth
262 or libgcrypt-pthread is supported.
264 Noteworthy changes in version 1.1.92 (2004-02-20)
265 -------------------------------------------------
269 * Included a limited implementation of RFC2268.
271 * Changed API of the gcry_ac_ functions. Only a very few programs
272 should be affected by this.
274 * Interface changes relative to the 1.1.91 release:
275 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
276 GCRY_CIPHER_RFC2268_40 NEW.
277 gcry_ac_data_set CHANGED: New argument FLAGS.
278 gcry_ac_data_get_name CHANGED: New argument FLAGS.
279 gcry_ac_data_get_index CHANGED: New argument FLAGS.
280 gcry_ac_key_pair_generate CHANGED: New and reordered arguments.
281 gcry_ac_key_test CHANGED: New argument HANDLE.
282 gcry_ac_key_get_nbits CHANGED: New argument HANDLE.
283 gcry_ac_key_get_grip CHANGED: New argument HANDLE.
284 gcry_ac_data_search REMOVED.
285 gcry_ac_data_add REMOVED.
286 GCRY_AC_DATA_FLAG_NO_BLINDING REMOVED.
287 GCRY_AC_FLAG_NO_BLINDING NEW: Replaces above.
290 Noteworthy changes in version 1.1.91 (2003-12-19)
291 -------------------------------------------------
293 * Code cleanups and minor bug fixes.
296 Noteworthy changes in version 1.1.90 (2003-11-14)
297 -------------------------------------------------
299 * The use of the GCRY_WEAK_RANDOM level is now deprecated in favor of
300 the new gcry_create_nonce function.
302 * gcry_sexp_build now supports a "%b" format to include a memory buffer.
304 * Minor configuration fixes.
306 * Interface changes relative to the 1.1.44 release:
307 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
308 gcry_create_nonce NEW
309 gcry_sexp_build ENHANCED
312 Noteworthy changes in version 1.1.44 (2003-10-31)
313 -------------------------------------------------
315 * Bug fixes and more code cleanups.
317 * Enhanced the prime API.
319 * Interface changes relative to the 1.1.43 release:
320 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
321 gcry_prime_group_generator NEW
322 gcry_prime_release_factors NEW
325 Noteworthy changes in version 1.1.43 (2003-09-04)
326 -------------------------------------------------
328 * Bug fixes and internal code cleanups.
330 * Support for the Serpent cipher algorithm.
332 * Interface changes relative to the 1.1.42 release:
333 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
334 gcry_prime_generate NEW
338 Noteworthy changes in version 1.1.42 (2003-07-31)
339 -------------------------------------------------
341 * Major API cleanup. Applications need to be converted to the new
342 API. See README.apichanges for hints on how to do that. Backward
343 compatibility is provided where it was possible without too much
344 effort and did not collide with the overall sanitization effort.
345 However, this is only for ease of transition. NO DEPRECATED
346 FUNCTION OR DATA TYPE IS CONSIDERED A PART OF THE API OR ABI AND
347 WILL BE DROPPED IN THE FUTURE WITHOUT CHANGING THE SONAME OF THE
350 * If gcrypt.h is included in sources compiled by GCC 3.1 or later,
351 deprecated attributes will warn about use of obsolete functions and
352 type definitions. You can suppress these warnings by passing
353 -Wno-deprecated-declarations to the gcc command.
355 * gcry_check_version must be called from now on to initialize the
356 library, it is not longer optional.
358 * Removed `libgcrypt errno' concept.
360 * Libgcrypt depends on libgpg-error, a library that provides error
361 codes and according functions for all GnuPG components. Functions
362 that used to return error codes asa `int' have been changed to
363 return a code of type `gcry_error_t'. All GCRYERR_* error symbols
364 have been removed, since they are now contained in libgpg-error
365 (GPG_ERR_*). All functions and types in libgpg-error have also been
366 wrapped in Libgcrypt. The new types are gcry_err_code_t and
367 gcry_err_source_t. The new functions are gcry_err_code,
368 gcry_err_source, gcry_error, gcry_err_make, gcry_error_from_errno,
369 gcry_err_make_from_errno, gcry_err_code_from_errno,
370 gcry_err_code_to_errno, gcry_strsource.
372 * New function gcry_mpi_dump to help in debugging.
374 * Added alternative interface for asymmetric cryptography.
376 * CRC-32, CRC-32 a'la RFC 1510, CRC-24 a'la RFC 2440 are now
379 * SHA-256, SHA-384 and SHA-512 are now supported.
381 * 128 bit Twofish is now supported.
383 * The random module won't print the "not enough random bytes
384 available" anymore. A new progress status is issued instead.
386 * CBC-MAC for block ciphers is now supported, by using a
387 GCRY_CIPHER_CBC_MAC cipher flag.
389 * CTR mode for block ciphers is now supported.
391 * The public RSA exponent can now be specified in key generation.
393 * RSA blinding is now supported and is used automatically for RSA
394 decryption. It can be explicitely disabled by using the
395 `no-blinding' symbol in the `flags' S-Expression or by using the
396 GCRY_AC_FLAG_DATA_NO_BLINDING flag when using the ac interface.
398 * gcry_sexp_canon_len does not use a `historically encoded' error
402 * Interface changes relative to the 1.1.12 release:
403 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
404 GCRY_MPI DEPRECATED; Use: gcry_mpi_t
405 GcryMPI DEPRECATED; Use: gcry_mpi_t
406 GCRY_SEXP DEPRECATED; Use: gcry_sexp_t
407 GcrySexp DEPRECATED; Use: gcry_sexp_t
408 GCRY_CIPHER_HD DEPRECATED; Use: gcry_cipher_hd_t
409 GcryCipherHd DEPRECATED; Use: gcry_cipher_hd_t
410 GCRY_MD_HD DEPRECATED; Use: gcry_md_hd_t
411 GcryMDHd DEPRECATED; Use: gcry_md_hd_t
414 gcry_err_source_t NEW
419 gcry_err_code_from_errno NEW
420 gcry_err_code_to_errno NEW
421 gcry_err_make_from_errno NEW
422 gcry_error_from_errno NEW
424 GCRYERR_{some error code} REMOVED; Use GPG_ERR_*
425 from libgpg-error instead.
427 gcry_sexp_canon_len CHANGED
428 gcry_sexp_build_array NEW
429 gcry_mpi_scan CHANGED: New argument to separate in/out args.
430 gcry_mpi_print CHANGED: Ditto.
432 gcry_cipher_open CHANGED
433 gcry_cipher_reset NEW
434 gcry_cipher_register NEW
435 gcry_cipher_unregister NEW
437 gcry_cipher_algo_keylen REPLACED macro with function.
438 gcry_cipher_algo_blklen REPLACED macro with function.
440 gcry_pk_unregister NEW
442 gcry_pk_decrypt ENHANCED: Allows flag to return
443 complete S-expression.
446 gcry_md_is_enabled NEW
447 gcry_md_is_secure NEW
449 gcry_md_unregister NEW
453 gcry_ac_key_pair_t NEW
455 gcry_ac_key_spec_rsa_t NEW
457 gcry_ac_data_destroy NEW
459 gcry_ac_data_copy NEW
460 gcry_ac_data_length NEW
461 gcry_ac_data_get_name NEW
462 gcry_ac_data_get_index NEW
463 gcry_ac_data_clear NEW
467 gcry_ac_key_pair_generate NEW
468 gcry_ac_key_pair_extract NEW
469 gcry_ac_key_data_get NEW
471 gcry_ac_key_get_nbits NEW
472 gcry_ac_key_get_grip NEW
473 gcry_ac_key_destroy NEW
474 gcry_ac_key_pair_destroy NEW
475 gcry_ac_data_encrypt NEW
476 gcry_ac_data_decrypt NEW
477 gcry_ac_data_sign NEW
478 gcry_ac_data_verify NEW
479 gcry_ac_id_to_name NEW
480 gcry_ac_name_to_id NEW
481 gcry_handler_progress_t NEW
482 gcry_handler_alloc_t NEW
483 gcry_handler_secure_check_t NEW
484 gcry_handle_realloc_t NEW
485 gcry_handler_free_t NEW
486 gcry_handler_no_mem_t NEW
487 gcry_handler_error_t NEW
488 gcry_handler_log_t NEW
489 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
491 Noteworthy changes in version 1.1.12 (2003-01-20)
492 -------------------------------------------------
494 * gcry_pk_sign, gcry_pk_verify and gcry_pk_encrypt can now handle an
495 optional pkcs1 flags parameter in the S-expression. A similar flag
496 may be passed to gcry_pk_decrypt but it is only syntactically
499 * New convenience macro gcry_md_get_asnoid.
501 * There is now some real stuff in the manual.
504 Noteworthy changes in version 1.1.11 (2002-12-21)
505 -------------------------------------------------
507 * Don't export internal symbols anymore (currently only for GNU systems)
511 * Implemented ciphertext stealing.
513 * Smaller bugs fixes and a few new OIDs.
515 * Interface changes relative to the 1.1.8 release:
516 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
518 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
521 Noteworthy changes in version 1.1.10 (2002-09-20)
522 -------------------------------------------------
524 * Fixed shared library builds for i386, PPC and Sparc.
526 * Added simple benchmark tool.
528 * Replaced the internal mutexes by code which automatically adapts to
529 the used threading library. Currently Pth and Pthread are
530 supported. For non-ELF systems the GNU toolchain is now required..
532 * Added untested support to build Windows DLLs.
534 Noteworthy changes in version 1.1.9 (2002-08-23)
535 ------------------------------------------------
537 * Support for plain old DES.
540 Noteworthy changes in version 1.1.8 (2002-06-25)
541 ------------------------------------------------
543 * Minor cleanups and exported a few new functions.
545 * Interface changes relative to the 1.1.7 release:
546 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
551 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
553 Noteworthy changes in version 1.1.7 (2002-05-21)
554 ------------------------------------------------
556 * Libgcrypt is now distributed under the terms of the GNU Lesser
557 General Public License; see the README file for details.
559 * It is possible to use libgcrypt w/o intialized secure memory.
561 * Libgcrypt should now be thread safe after the initialization.
562 gcry_control (GCRYCRL_INITIALIZATION_FINISHED,NULL,0) should have
563 been called before creating additional threads.
565 * Interface changes relative to the 1.1.6 release:
566 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
567 GCRYCTL_DISABLE_INTERNAL_LOCKING NEW
568 GCRYCTL_DISABLE_SECMEM NEW
569 GCRYCTL_INITIALIZATION_FINISHED NEW
570 GCRYCTL_INITIALIZATION_FINISHED_P NEW
571 GCRYCTL_ANY_INITIALIZATION_P NEW
575 gcry_set_progress_handler NEW
576 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
578 Noteworthy changes in version 1.1.6 (2002-02-07)
579 ------------------------------------------------
581 * Enhanced the S-expression conversion functions.
583 Noteworthy changes in version 1.1.5 (2001-12-18)
584 ------------------------------------------------
586 * gcry_{cipher,md}_map_name are now able to map stringified object IDs.
588 * New functions gcry_sexp_canon_len and gcry_cipher_mode_from_oid.
590 * Closed some memory leaks.
593 Noteworthy changes in version 1.1.4 (2001-08-03)
594 ------------------------------------------------
596 * Arcfour does now work.
600 * Added a first test program
602 * Migrated to autoconf 2.52.
605 Noteworthy changes in version 1.1.3 (2001-05-31)
606 ------------------------------------------------
608 * First release of Libgcrypt which is a result of splitting GnuPG
609 into into libgcrypt and GnuPG.
612 Copyright 2001, 2002, 2003, 2004, 2007, 2008,
613 2009 Free Software Foundation, Inc.
615 This file is free software; as a special exception the author gives
616 unlimited permission to copy and/or distribute it, with or without
617 modifications, as long as this notice is preserved.
619 This file is distributed in the hope that it will be useful, but
620 WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
621 implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.