From patchwork Tue Apr 7 15:10:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9628 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4fqqRP36Dpz3wbG for ; Tue, 07 Apr 2026 15:11:45 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E7" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4fqqRP15clz6Vq for ; Tue, 07 Apr 2026 15:11:45 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4fqqR51MMnz37PY for ; Tue, 07 Apr 2026 15:11:29 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4fqqQs3dz6z36V7 for ; Tue, 07 Apr 2026 15:11:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4fqqQr6ldHz5hM; Tue, 07 Apr 2026 15:11:16 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1775574677; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=uZwSH340OwPrzM0BQ51rBQj6aJc5yPgbV50LHNsFAGc=; b=IaLnKViPO2hKiLoEf9eYk3/OYD4JiqSV59cSZW0VsqVIhCrUm2kIenlwotfKZta2+WanmG /9i1bE3/j6HlqqAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1775574677; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=uZwSH340OwPrzM0BQ51rBQj6aJc5yPgbV50LHNsFAGc=; b=bdRa7SERcPNfciiA69l/wfaFKY1d0ciJ+gVvQxczjEFPQ66V59xe4OGjOHJ7POZWb6bfbd kbIujjpZE+u55G5Lug055bZw32AzERwJ5uiQHbVegqpaVbkP9//TclSJISn58nu24Ij2Nc OdCMOABFT4g5BCKqy92z8K8thMPUDqzWWQIw+/TFxA42DOKi4IW4gkGR7CVBFbS5zvxw4z dIaoa6mEZ51Z7N0Sie11R+ytBOyyEyVRzQXkukQ5YjlCx/FfDgghgqSL1muK1EBye+2mgY FiOPEcA6l7v0iiDkUUPfuNxCycE9efDDO9LnjimFiWd44jqZk7q8ElBGhbHVyA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libsodium: Update to version 1.0.21 Date: Tue, 7 Apr 2026 17:10:51 +0200 Message-ID: <20260407151108.3472751-18-adolf.belka@ipfire.org> In-Reply-To: <20260407151108.3472751-1-adolf.belka@ipfire.org> References: <20260407151108.3472751-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.0.20 to 1.0.21 - Update of rootfile - Changelog 1.0.21 This point release includes all the changes from 1.0.20-stable, which include a security fix for the `crypto_core_ed25519_is_valid_point()` function, as well as two new sets of functions: - The new `crypto_ipcrypt_*` functions implement mechanisms for securely encrypting and anonymizing IP addresses as specified in https://ipcrypt-std.github.io - The `sodium_bin2ip` and `sodium_ip2bin` helper functions have been added to complement the `crypto_ipcrypt_*` functions and easily convert addresses between bytes and strings. - XOF: the `crypto_xof_shake*` and `crypto_xof_turboshake*` functions are standard extendable output functions. From input of any length, they can derive output of any length with the same properties as hash functions. These primitives are required by many post-quantum mechanisms, but can also be used for a wide range of applications, including key derivation, session encryption and more. Signed-off-by: Adolf Belka --- config/rootfiles/common/libsodium | 8 +++++++- lfs/libsodium | 6 +++--- 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/libsodium b/config/rootfiles/common/libsodium index baa63e259..423fabba1 100644 --- a/config/rootfiles/common/libsodium +++ b/config/rootfiles/common/libsodium @@ -16,6 +16,7 @@ #usr/include/sodium/crypto_core_ed25519.h #usr/include/sodium/crypto_core_hchacha20.h #usr/include/sodium/crypto_core_hsalsa20.h +#usr/include/sodium/crypto_core_keccak1600.h #usr/include/sodium/crypto_core_ristretto255.h #usr/include/sodium/crypto_core_salsa20.h #usr/include/sodium/crypto_core_salsa2012.h @@ -25,6 +26,7 @@ #usr/include/sodium/crypto_hash.h #usr/include/sodium/crypto_hash_sha256.h #usr/include/sodium/crypto_hash_sha512.h +#usr/include/sodium/crypto_ipcrypt.h #usr/include/sodium/crypto_kdf.h #usr/include/sodium/crypto_kdf_blake2b.h #usr/include/sodium/crypto_kdf_hkdf_sha256.h @@ -59,6 +61,10 @@ #usr/include/sodium/crypto_verify_16.h #usr/include/sodium/crypto_verify_32.h #usr/include/sodium/crypto_verify_64.h +#usr/include/sodium/crypto_xof_shake128.h +#usr/include/sodium/crypto_xof_shake256.h +#usr/include/sodium/crypto_xof_turboshake128.h +#usr/include/sodium/crypto_xof_turboshake256.h #usr/include/sodium/export.h #usr/include/sodium/randombytes.h #usr/include/sodium/randombytes_internal_random.h @@ -69,5 +75,5 @@ #usr/lib/libsodium.la #usr/lib/libsodium.so usr/lib/libsodium.so.26 -usr/lib/libsodium.so.26.2.0 +usr/lib/libsodium.so.26.3.0 #usr/lib/pkgconfig/libsodium.pc diff --git a/lfs/libsodium b/lfs/libsodium index 07c13adca..acd4a72dc 100644 --- a/lfs/libsodium +++ b/lfs/libsodium @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.0.20 +VER = 1.0.21 THISAPP = libsodium-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2f1d8b2dc8a65f95433132b12bdccb7e0e4750326b05c4f42ddd3a74bf568faa2515384bfe94bba2ef420aff35c515d3d44945ea5a68f72e6a73b3a9b5bb234c +$(DL_FILE)_BLAKE2 = df68159bbf0b5198ab185e93857b4f07af1d4aa7ffd178b7cb78ff5b020b6ee93ab5c3e71f59812b79906ff4df19e42845435c2bc22bbe8b0a0804076b0ddd05 install : $(TARGET)