878b57ca3b
Fix CVE-2021-33560: Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. (There is also an interoperability problem because the selection of the k integer value does not properly consider the differences between basic ElGamal encryption and generalized ElGamal encryption.) This, for example, affects use of ElGamal in OpenPGP. https://dev.gnupg.org/T5305 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
34 lines
975 B
Makefile
34 lines
975 B
Makefile
################################################################################
|
|
#
|
|
# libgcrypt
|
|
#
|
|
################################################################################
|
|
|
|
LIBGCRYPT_VERSION = 1.9.3
|
|
LIBGCRYPT_SOURCE = libgcrypt-$(LIBGCRYPT_VERSION).tar.bz2
|
|
LIBGCRYPT_LICENSE = LGPL-2.1+
|
|
LIBGCRYPT_LICENSE_FILES = COPYING.LIB
|
|
LIBGCRYPT_SITE = https://gnupg.org/ftp/gcrypt/libgcrypt
|
|
LIBGCRYPT_INSTALL_STAGING = YES
|
|
LIBGCRYPT_DEPENDENCIES = libgpg-error
|
|
LIBGCRYPT_CONFIG_SCRIPTS = libgcrypt-config
|
|
LIBGCRYPT_CPE_ID_VENDOR = gnupg
|
|
|
|
# Patching configure.ac and Makefile.am in 0001
|
|
LIBGCRYPT_AUTORECONF = YES
|
|
LIBGCRYPT_CONF_OPTS = \
|
|
--disable-tests \
|
|
--with-gpg-error-prefix=$(STAGING_DIR)/usr
|
|
|
|
# Libgcrypt doesn't support assembly for coldfire
|
|
ifeq ($(BR2_m68k_cf),y)
|
|
LIBGCRYPT_CONF_OPTS += --disable-asm
|
|
endif
|
|
|
|
# Code doesn't build in thumb mode
|
|
ifeq ($(BR2_arm),y)
|
|
LIBGCRYPT_CONF_ENV += CFLAGS="$(patsubst -mthumb,,$(TARGET_CFLAGS))"
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|