kumquat-buildroot/package/cryptopp/cryptopp.hash

# Hash from: https://www.cryptopp.com/release860.html:
sha512  e7773f5e4a7dc7e8e735b1702524bee56ba38e5211544c9c9778bc51ed8dc7b376c17f2e406410043b636312336f26f76dc963f298872f8c13933e88c232fc03  cryptopp860.zip

# Hash for license file:
sha256  e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f  License.txt
package/cryptopp: security bump to version 8.6.0 This release clears CVE-2021-40530 and fixes a problem with ChaCha20 AVX2 implementation. The CVE was due to ElGamal encryption using a work estimate to size encryption exponents instead subgroup order. The ChaCha20 issue was due to mishandling a carry in the AVX2 code path. The ChaCha20 issue was difficult to duplicate, so most users should not experience it. https://github.com/weidai11/cryptopp/releases/tag/CRYPTOPP_8_6_0 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-09-24 18:28:44 +02:00			`# Hash from: https://www.cryptopp.com/release860.html:`
			`sha512 e7773f5e4a7dc7e8e735b1702524bee56ba38e5211544c9c9778bc51ed8dc7b376c17f2e406410043b636312336f26f76dc963f298872f8c13933e88c232fc03 cryptopp860.zip`
cryptopp: bump to version 6.1.0 Remove patch (applied upstream) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-04 10:06:16 +01:00
			`# Hash for license file:`
package/cryptopp: security bump to version 8.3.0 - Fix CVE-2019-14318: Crypto++ 8.2.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information. For details, see: https://github.com/weidai11/cryptopp/issues/869 - Update license hash due to the addition of ARM SHA1 and SHA256 asm implementation from Cryptogams https://github.com/weidai11/cryptopp/commit/1a63112faf5af60e0ebcc60654eef806e7f6f11a https://github.com/weidai11/cryptopp/commit/4c9ca6b723b5ec5aab7eec720ad4d22598abe941 https://www.cryptopp.com/release830.html [Peter: adjust CVE info, issue is fixes in 8.3.0] Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-12-20 18:55:56 +01:00			`sha256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f License.txt`