--disable-asm dates back to the import of the package from the old
packages repository (5bf972ecf). libgcrypt detects CPU features at
runtime, and with its assembly it uses the Armv8 crypto extensions and
NEON on ARM and the vector crypto extensions on RISC-V.
bench-slope, median of 3 runs, Cortex-A53: AES-CBC decryption 23.9 ->
1357 MiB/s, AES-GCM 19.1 -> 646 MiB/s, SHA-256 70.8 -> 620 MiB/s.
Cortex-A72 in AArch32, without crypto extensions: SHA-512 45.7 -> 78.0
MiB/s, AES-GCM 33.0 -> 47.7 MiB/s.
libgcrypt.so grows by 34 KiB on aarch64, 35 KiB on riscv64 and 12 KiB on
arm, compressed with xz. mips and loongarch64 gain no assembly and grow
by less than 5 KiB.
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Julius Bairaktaris <julius@bairaktaris.de>
1.12.3 and 1.12.4 fix bugs and security issues, among them RSA PSS and
OAEP input validation and an out-of-bounds read in the GOST28147 MAC.
1.12.3 also adds interfaces; the SONAME stays libgcrypt.so.20.
Release notes:
https://dev.gnupg.org/T8223https://dev.gnupg.org/T8417
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Julius Bairaktaris <julius@bairaktaris.de>
Install pkgconfig metadata to allow detection of libgcrypt during
build of other packages which rely on pkgconfig.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.
The following temporary change was made to the core:
diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))
COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))
all:
FORCE: ;
And this command used to fix affected packages:
for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
make package/$i/download
done
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".
Signed-off-by: Sven Eckelmann <sven@narfation.org>
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git
(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
Julius Bairaktaris
W. Michael Petullo
George Sapkin
Daniel Golle
Paul Fertser
Rosen Penev
Sven Eckelmann
champtar
Ben Smith
Alexander Couzens
Florian Eckert
Steven Barth