I'm happy to announce a new release of GNU Nettle, a low-level cryptographics library. This release adds support for RSA-OAEP, and improves performance mainly for powerpc64. See NEWS entries below.

The Nettle home page can be found at https://www.lysator.liu.se/~nisse/nettle/, and the manual at https://www.lysator.liu.se/~nisse/nettle/nettle.html.

The release can be downloaded from

https://ftp.gnu.org/gnu/nettle/nettle-3.10.tar.gz https://www.lysator.liu.se/~nisse/archive/nettle-3.10.tar.gz

Happy hacking, /Niels Möller

NEWS for the Nettle 3.10 release

This is a maintenance release, including a few each of bug fixes, new features and optimizations.

The new version is intended to be fully source and binary compatible with Nettle-3.6. The shared library names are libnettle.so.8.9 and libhogweed.so.6.9, with sonames libnettle.so.8 and libhogweed.so.6.

Bug fixes:

* Add missing hash functions sha512_224 and sha512_256 to the nettle_get_hashes() list. The name values in the corresponding nettle_hash structs also changed to use underscore instead of dash, for consistency.

* Fix a few cases of formally undefined calls to memcpy(dst, NULL, 0), resulting from valid calls to, e.g., sha256_update(ctx, 0, NULL).

New features:

* Support RSA-OAEP encryption. Contributed by Nicolas Mora and Daiki Ueno.

* New function sha3_256_shake_output, new functions sha3_128_init, sha3_128_update, sha3_128_shake, sha3_128_shake_output. Contributed by Daiki Ueno.

* Added DRBG-CTR with AES256, contributed by Simon Josefsson.

Optimizations:

* New combined gcm-aes assembly for powerpc64, contributed by Danny Tsen.

* New sha256 assembly for powerpc64, contributed by Eric Richter.

* Improved performance for powerpc64 AES decrypt, by skipping subkey transformations that don't suit the vncipher instructions.

* Add arm64 CPU feature detection for Android and for Apple systems, contributed by Foolbar and Tim Kosse, prespectively.

Miscellaneous:

* New tests for side-channel silence, based on valgrind.

* Delete all md5 assembly code. Delete all sparc32 assembly code.