Noteworthy changes in version 1.8.5 (2019-08-29)  [C22/A2/R5]

------------------------------------------------

 * Bug fixes:

   - Add mitigation against an ECDSA timing attack.

     [#4626,CVE-2019-13627]

   - Improve ECDSA unblinding.

 * Other features:

   - Provide a pkg-config file for libgcrypt.

 Release-info: https://dev.gnupg.org/T4683

Noteworthy changes in version 1.8.4 (2018-10-26)  [C22/A2/R4]

------------------------------------------------

 * Bug fixes:

   - Fix infinite loop due to applications using fork the wrong

     way.  [#3491]

   - Fix possible leak of a few bits of secret primes to pageable

     memory.  [#3848]

   - Fix possible hang in the RNG (1.8.3 only).  [#4034]

   - Several minor fixes.  [#4102,#4208,#4209,#4210,#4211,#4212]

 * Performance:

   - On Linux always make use of getrandom if possible and then use

     its /dev/urandom behaviour.  [#3894]

 Release-info: https://dev.gnupg.org/T4234

Noteworthy changes in version 1.8.3 (2018-06-13)  [C22/A2/R3]

------------------------------------------------

 * Bug fixes:

   - Use blinding for ECDSA signing to mitigate a novel side-channel

     attack.  [#4011,CVE-2018-0495]

   - Fix incorrect counter overflow handling for GCM when using an IV

     size other than 96 bit.  [#3764]

   - Fix incorrect output of AES-keywrap mode for in-place encryption

     on some platforms.

   - Fix the gcry_mpi_ec_curve_point point validation function.

   - Fix rare assertion failure in gcry_prime_check.

 Release-info: https://dev.gnupg.org/T4016

Noteworthy changes in version 1.8.2 (2017-12-13)  [C22/A2/R2]

------------------------------------------------

 * Bug fixes:

   - Do not use /dev/srandom on OpenBSD.

   - Fix test suite failure on systems with large pages. [#3351]

   - Fix test suite to not use mmap on Windows.

   - Fix fatal out of secure memory status in the s-expression parser

     on heavy loaded systems.

 * Other:

   - Backport the auto expand secmem feature from master for use by

     the forthcoming GnuPG 2.2.4.

Noteworthy changes in version 1.8.1 (2017-08-27)  [C22/A2/R1]

------------------------------------------------

 * Bug fixes:

   - Mitigate a local side-channel attack on Curve25519 dubbed "May

     the Fourth be With You".  [CVE-2017-0379] [also in 1.7.9]

   - Add more extra bytes to the pool after reading a seed file.

   - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384.

   - Fix build problems with the Jitter RNG

   - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE).

Noteworthy changes in version 1.8.0 (2017-07-18)  [C22/A2/R0]

------------------------------------------------

 * New interfaces:

   - New cipher mode XTS

   - New hash function Blake-2

   - New function gcry_mpi_point_copy.

   - New function gcry_get_config.

   - GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.

   - New global configuration file /etc/gcrypt/random.conf.

 * Extended interfaces:

   - GCRYCTL_PRINT_CONFIG does now also print build information for

     libgpg-error and the used compiler version.

   - GCRY_CIPHER_MODE_CFB8 is now supported.

   - Add Stribog OIDs.  [also in 1.7.4]

 * Performance:

   - A jitter based entropy collector is now used in addition to the

     other entropy collectors.

   - Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.

   - More ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.

     [also in 1.7.4]

   - Add ARMv8/AArch32 assembly implementation for Twofish and

     Camellia.  [also in 1.7.4]

   - Add bulk processing implementation for ARMv8/AArch32.

     [also in 1.7.4]

   - Improve the DRBG performance and sync the code with the Linux

     version.  [also in 1.7.4]

 * Internal changes:

   - Libgpg-error 1.25 is now required.  This avoids stalling of nPth

     threads due to contention on internal Libgcrypt locks (e.g. the

     random pool lock).

   - The system call clamp of libgpg-error is now used to wrap the

     blocking read of /dev/random.  This allows other nPth threads to

     run while Libgcrypt is gathering entropy.

   - When secure memory is requested by the MPI functions or by

     gcry_xmalloc_secure, they do not anymore lead to a fatal error if

     the secure memory pool is used up.  Instead new pools are

     allocated as needed.  These new pools are not protected against

     being swapped out (mlock can't be used).  However, these days

     this is considered a minor issue and can easily be mitigated by

     using encrypted swap space.  [also in 1.7.4]

 * Bug fixes:

   - Fix AES CTR self-check detected failure in the SSSE3 based

     implementation.  [also in 1.7.6]

   - Remove gratuitous select before the getrandom syscall.

     [also in 1.7.6]

   - Fix regression in mlock detection.  [bug#2870] [also in 1.7.5]

   - Fix GOST 28147 CryptoPro-B S-box.   [also in 1.7.4]

   - Fix error code handling of mlock calls.  [also in 1.7.4]

   - Fix possible timing attack on EdDSA session key. [also in 1.7.7]

   - Fix long standing bug in secure memory implementation which could

     lead to a segv on free. [bug#3027] [also in 1.7.7]

   - Mitigate a flush+reload side-channel attack on RSA secret keys

     dubbed "Sliding right into disaster".  For details see

     <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526] [also in 1.7.8]

 * Interface changes relative to the 1.7.0 release:

   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   gcry_get_config                 NEW function.

   gcry_mpi_point_copy             NEW function.

   GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.

   GCRY_MD_BLAKE2B_512             NEW constant.

   GCRY_MD_BLAKE2B_384             NEW constant.

   GCRY_MD_BLAKE2B_256             NEW constant.

   GCRY_MD_BLAKE2B_160             NEW constant.

   GCRY_MD_BLAKE2S_256             NEW constant.

   GCRY_MD_BLAKE2S_224             NEW constant.

   GCRY_MD_BLAKE2S_160             NEW constant.

   GCRY_MD_BLAKE2S_128             NEW constant.

   GCRY_CIPHER_MODE_XTS            NEW constant.

   gcry_md_info                    DEPRECATED.

 * Release dates of 1.7.x versions:

   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   Version 1.7.8 (2017-06-29)  [C21/A1/R8]

   Version 1.7.7 (2017-06-02)  [C21/A1/R7]

   Version 1.7.6 (2017-01-18)  [C21/A1/R6]

   Version 1.7.5 (2016-12-15)  [C21/A1/R5]

   Version 1.7.4 (2016-12-09)  [C21/A1/R4]

Noteworthy changes in version 1.7.3 (2016-08-17)  [C21/A1/R3]

------------------------------------------------

 * Bug fixes:

   - Fix critical security bug in the RNG [CVE-2016-6313].  An

     attacker who obtains 580 bytes from the standard RNG can

     trivially predict the next 20 bytes of output.  Problem

     detected by Felix Dörre and Vladimir Klebanov, KIT.

   - Fix building of some asm modules with older compilers and CPUs.

 * Performance:

   - ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.

Noteworthy changes in version 1.7.2 (2016-07-14)  [C21/A1/R2]

------------------------------------------------

 * Bug fixes:

   - Fix setting of the ECC cofactor if parameters are specified.

   - Fix memory leak in the ECC code.

   - Remove debug message about unsupported getrandom syscall.

   - Fix build problems related to AVX use.

   - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.

 * Internal changes:

   - Improved fatal error message for wrong use of gcry_md_read.

   - Disallow symmetric encryption/decryption if key is not set.

Noteworthy changes in version 1.7.1 (2016-06-15)  [C21/A1/R1]

------------------------------------------------

 * Bug fixes:

   - Fix ecc_verify for cofactor support.

   - Fix portability bug when using gcc with Solaris 9 SPARC.

   - Build fix for OpenBSD/amd64

   - Add OIDs to the Serpent ciphers.

 * Internal changes:

   - Use getrandom system call on Linux if available.

   - Blinding is now also used for RSA signature creation.

   - Changed names of debug envvars

Noteworthy changes in version 1.7.0 (2016-04-15)  [C21/A1/R0]

------------------------------------------------

 * New algorithms and modes:

   - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.

   - SHAKE128 and SHAKE256 extendable-output hash algorithms.

   - ChaCha20 stream cipher.

   - Poly1305 message authentication algorithm

   - ChaCha20-Poly1305 Authenticated Encryption with Associated Data

     mode.

   - OCB mode.

   - HMAC-MD2 for use by legacy applications.

 * New curves for ECC:

   - Curve25519.

   - sec256k1.

   - GOST R 34.10-2001 and GOST R 34.10-2012.

 * Performance:

   - Improved performance of KDF functions.

   - Assembler optimized implementations of Blowfish and Serpent on

     ARM.

   - Assembler optimized implementation of 3DES on x86.

   - Improved AES using the SSSE3 based vector permutation method by

     Mike Hamburg.

   - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1

     about 20% faster than SSSE3 and more than 100% faster than the

     generic C implementation.

   - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.

   - 60-90% speedup for Whirlpool on x86.

   - 300% speedup for RIPE MD-160.

   - Up to 11 times speedup for CRC functions on x86.

 * Other features:

   - Improved ECDSA and FIPS 186-4 compliance.

   - Support for Montgomery curves.

   - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher

     algorithm.

   - gcry_mpi_ec_sub to subtract two points on a curve.

   - gcry_mpi_ec_decode_point to decode an MPI into a point object.

   - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]

   - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied

     hash part.

   - Parameter "saltlen" to set a non-default salt length for RSA PSS.

   - A SP800-90A conforming DRNG replaces the former X9.31 alternative

     random number generator.

   - Map deprecated RSA algo number to the RSA algo number for better

     backward compatibility. [from 1.6.2]

   - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].

     See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.

     [from 1.6.3]

   - Fixed data-dependent timing variations in modular exponentiation

     [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks

      are Practical]. [from 1.6.3]

   - Flag "no-keytest" for ECC key generation.  Due to a bug in

     the parser that flag will also be accepted but ignored by older

     version of Libgcrypt. [from 1.6.4]

   - Speed up the random number generator by requiring less extra

     seeding. [from 1.6.4]

   - Always verify a created RSA signature to avoid private key leaks

     due to hardware failures. [from 1.6.4]

   - Mitigate side-channel attack on ECDH with Weierstrass curves

     [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for

     details. [from 1.6.5]

 * Internal changes:

   - Moved locking out to libgpg-error.

   - Support of the SYSROOT envvar in the build system.

   - Refactor some code.

   - The availability of a 64 bit integer type is now mandatory.

 * Bug fixes:

   - Fixed message digest lookup by OID (regression in 1.6.0).

   - Fixed a build problem on NetBSD

   - Fixed memory leaks in ECC code.

   - Fixed some asm build problems and feature detection bugs.

 * Interface changes relative to the 1.6.0 release:

   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   gcry_cipher_final               NEW macro.

   GCRY_CIPHER_MODE_CFB8           NEW constant.

   GCRY_CIPHER_MODE_OCB            NEW.

   GCRY_CIPHER_MODE_POLY1305       NEW.

   gcry_cipher_set_sbox            NEW macro.

   gcry_mac_get_algo               NEW.

   GCRY_MAC_HMAC_MD2               NEW.

   GCRY_MAC_HMAC_SHA3_224          NEW.

   GCRY_MAC_HMAC_SHA3_256          NEW.

   GCRY_MAC_HMAC_SHA3_384          NEW.

   GCRY_MAC_HMAC_SHA3_512          NEW.

   GCRY_MAC_POLY1305               NEW.

   GCRY_MAC_POLY1305_AES           NEW.

   GCRY_MAC_POLY1305_CAMELLIA      NEW.

   GCRY_MAC_POLY1305_SEED          NEW.

   GCRY_MAC_POLY1305_SERPENT       NEW.

   GCRY_MAC_POLY1305_TWOFISH       NEW.

   gcry_md_extract                 NEW.

   GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].

   GCRY_MD_GOSTR3411_CP            NEW.

   GCRY_MD_SHA3_224                NEW.

   GCRY_MD_SHA3_256                NEW.

   GCRY_MD_SHA3_384                NEW.

   GCRY_MD_SHA3_512                NEW.

   GCRY_MD_SHAKE128                NEW.

   GCRY_MD_SHAKE256                NEW.

   gcry_mpi_ec_decode_point        NEW.

   gcry_mpi_ec_sub                 NEW.

   GCRY_PK_EDDSA                   NEW constant.

   GCRYCTL_GET_TAGLEN              NEW.

   GCRYCTL_SET_SBOX                NEW.

   GCRYCTL_SET_TAGLEN              NEW.

   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Version 1.6.5 (2016-02-09) [C20/A0/R5]

Version 1.6.4 (2015-09-08) [C20/A0/R4]

Version 1.6.3 (2015-02-27) [C20/A0/R3]

Version 1.6.2 (2014-08-21) [C20/A0/R2]

Version 1.6.1 (2014-01-29) [C20/A0/R1]

Noteworthy changes in version 1.6.0 (2013-12-16) [C20/A0/R0]

------------------------------------------------

 * Removed the long deprecated gcry_ac interface.  Thus Libgcrypt is

   not anymore ABI compatible to previous versions if they used the ac

   interface.

 * Removed the module register subsystem.

 * The deprecated message digest debug macros have been removed.  Use

   gcry_md_debug instead.

 * Removed deprecated control codes.

 * Improved performance of most cipher algorithms as well as for the

   SHA family of hash functions.

 * Added support for the IDEA cipher algorithm.

 * Added support for the Salsa20 and reduced Salsa20/12 stream ciphers.

 * Added limited support for the GOST 28147-89 cipher algorithm.

 * Added support for the GOST R 34.11-94 and R 34.11-2012 (Stribog)

   hash algorithms.

 * Added a random number generator to directly use the system's RNG.

   Also added an interface to prefer the use of a specified RNG.

 * Added support for the SCRYPT algorithm.

 * Mitigated the Yarom/Falkner flush+reload side-channel attack on RSA

   secret keys.  See <http://eprint.iacr.org/2013/448> [CVE-2013-4242].

 * Added support for Deterministic DSA as per RFC-6979.

 * Added support for curve Ed25519.

 * Added a scatter gather hash convenience function.

 * Added several MPI amd SEXP helper functions.

 * Added support for negative numbers to gcry_mpi_print,

   gcry_mpi_aprint and gcry_mpi_scan.

 * The algorithm ids GCRY_PK_ECDSA and GCRY_PK_ECDH are now

   deprecated.  Use GCRY_PK_ECC if you need an algorithm id.

 * Changed gcry_pk_genkey for "ecc" to only include the curve name and

   not the parameters.  The flag "param" may be used to revert this.

 * Added a feature to globally disable selected hardware features.

 * Added debug helper functions.

 * Interface changes relative to the 1.5.0 release:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 gcry_ac_*               	 REMOVED.

 GCRY_AC_*               	 REMOVED.

 gcry_module_t          	 REMOVED.

 gcry_cipher_register   	 REMOVED.

 gcry_cipher_unregister 	 REMOVED.

 gcry_cipher_list       	 REMOVED.

 gcry_pk_register       	 REMOVED.

 gcry_pk_unregister     	 REMOVED.

 gcry_pk_list           	 REMOVED.

 gcry_md_register       	 REMOVED.

 gcry_md_unregister     	 REMOVED.

 gcry_md_list           	 REMOVED.

 gcry_md_start_debug    	 REMOVED (macro).

 gcry_md_stop_debug     	 REMOVED (macro).

 GCRYCTL_SET_KEY                 REMOVED.

 GCRYCTL_SET_IV                  REMOVED.

 GCRYCTL_SET_CTR                 REMOVED.

 GCRYCTL_DISABLE_ALGO            CHANGED: Not anymore thread-safe.

 gcry_pk_genkey                  CHANGED: ECC curve params not returned.

 gcry_md_hash_buffers            NEW.

 gcry_buffer_t                   NEW.

 GCRYCTL_SET_ENFORCED_FIPS_FLAG  NEW.

 GCRYCTL_SET_PREFERRED_RNG_TYPE  NEW.

 GCRYCTL_GET_CURRENT_RNG_TYPE    NEW.

 GCRYCTL_CLOSE_RANDOM_DEVICE     NEW.

 GCRY_RNG_TYPE_STANDARD          NEW.

 GCRY_RNG_TYPE_FIPS              NEW.

 GCRY_RNG_TYPE_SYSTEM            NEW.

 gcry_mpi_is_neg                 NEW.

 gcry_mpi_neg                    NEW.

 gcry_mpi_abs                    NEW.

 gcry_mpi_snatch                 NEW.

 gcry_mpi_set_opaque_copy        NEW.

 gcry_mpi_point_t                NEW.

 gcry_mpi_point_new              NEW.

 gcry_mpi_point_release          NEW.

 gcry_mpi_point_get              NEW.

 gcry_mpi_point_snatch_get       NEW.

 gcry_mpi_point_set              NEW.

 gcry_mpi_point_snatch_set       NEW.

 gcry_ctx_t                      NEW.

 gcry_ctx_release                NEW.

 gcry_mpi_ec_new                 NEW.

 gcry_mpi_ec_get_mpi             NEW.

 gcry_mpi_ec_get_point           NEW.

 gcry_mpi_ec_set_mpi             NEW.

 gcry_mpi_ec_set_point           NEW.

 gcry_mpi_ec_get_affine          NEW.

 gcry_mpi_ec_dup                 NEW.

 gcry_mpi_ec_add                 NEW.

 gcry_mpi_ec_mul                 NEW.

 gcry_mpi_ec_curve_point         NEW.

 GCRYMPI_FLAG_IMMUTABLE          NEW.

 GCRYMPI_FLAG_CONST              NEW.

 GCRYMPI_FLAG_USER1              NEW.

 GCRYMPI_FLAG_USER2              NEW.

 GCRYMPI_FLAG_USER3              NEW.

 GCRYMPI_FLAG_USER4              NEW.

 GCRYMPI_CONST_ONE               NEW.

 GCRYMPI_CONST_TWO               NEW.

 GCRYMPI_CONST_THREE             NEW.

 GCRYMPI_CONST_FOUR              NEW.

 GCRYMPI_CONST_EIGHT             NEW.

 GCRYMPI_FMT_OPAQUE              NEW.

 GCRYPT_VERSION_NUMBER           NEW.

 GCRY_KDF_SCRYPT                 NEW.

 gcry_pubkey_get_sexp            NEW.

 GCRYCTL_DISABLE_LOCKED_SECMEM   NEW.

 GCRYCTL_DISABLE_PRIV_DROP       NEW.

 GCRY_CIPHER_SALSA20             NEW.

 gcry_sexp_nth_buffer            NEW.

 gcry_sexp_extract_param         NEW.

 GCRY_CIPHER_SALSA20R12          NEW.

 GCRY_CIPHER_GOST28147           NEW.

 GCRY_MD_GOSTR3411_94            NEW.

 GCRY_MD_STRIBOG256              NEW.

 GCRY_MD_STRIBOG512              NEW.

 GCRY_PK_ECC                     NEW.

 gcry_log_debug                  NEW.

 gcry_log_debughex               NEW.

 gcry_log_debugmpi               NEW.

 gcry_log_debugpnt               NEW.

Noteworthy changes in version 1.5.0 (2011-06-29)

------------------------------------------------

 * New function gcry_kdf_derive implementing OpenPGP S2K algorithms

   and PBKDF2.

 * Support for WindowsCE.

 * Support for ECDH.

 * Support for OAEP and PSS methods as described by RFC-3447.

 * Fixed PKCS v1.5 code to always return the leading zero.

 * New format specifiers "%M" and "%u" for gcry_sexp_build.

 * Support opaque MPIs with "%m" and "%M" in gcry_sexp_build.

 * New functions gcry_pk_get_curve and gcry_pk_get_param to map ECC

   parameters to a curve name and to retrieve parameter values.

 * gcry_mpi_cmp applied to opaque values has a defined semantic now.

 * Uses the Intel AES-NI instructions if available.

 * The use of the deprecated Alternative Public Key Interface

   (gcry_ac_*) will now print compile time warnings.

 * The module register subsystem has been deprecated.  This subsystem

   is not flexible enough and would always require ABI changes to

   extend the internal interfaces.  It will eventually be removed.

   Please contact us on the gcrypt-devel mailing list to discuss

   whether you really need this feature or how it can be replaced by

   an internal plugin mechanism.

 * CTR mode may now be used with data chunks of arbitrary length.

 * Changes also done in 1.4.6 (2010-07-13):

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 * New variants of the TIGER algorithm.

 * New cipher algorithm mode for AES-WRAP.

 * Changes also done in 1.4.5 (2009-12-11):

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 * Fixed minor memory leak in DSA key generation.

 * No more switching to FIPS mode if /proc/version is not readable.

 * Fixed sigill during Padlock detection on old CPUs.

 * Fixed a hang on some W2000 machines.

 * Boosted SHA-512 performance by 30% on ia32 boxes and gcc 4.3;

   SHA-256 went up by 25%.

 * Interface changes relative to the 1.4.6 release:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 GCRY_PK_ECDH               NEW.

 gcry_pk_get_curve          NEW.

 gcry_pk_get_param          NEW.

 GCRYCTL_DISABLE_HWF        NEW.

 gcry_kdf_derive            NEW.

 gcry_pk_encrypt            EXTENDED: Support OAEP.

 gcry_pk_decrypt            EXTENDED: Support OAEP.

 gcry_pk_sign               EXTENDED: Support PSS.

 gcry_pk_verify             EXTENDED: Support PSS.

 gcry_sexp_build            EXTENDED: Add format specifiers M and u.

 * Interface changes relative to the 1.4.2 release:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 GCRY_CIPHER_MODE_AESWRAP   NEW.

 GCRY_MD_TIGER1             NEW.

 GCRY_MD_TIGER2             NEW.

Noteworthy changes in version 1.4.4 (2009-01-22)

------------------------------------------------

 * Publish GCRY_MODULE_ID_USER and GCRY_MODULE_ID_USER_LAST constants.

   This functionality has been in Libgcrypt since 1.3.0.

 * MD5 may now be used in non-enforced fips mode.

 * Fixed HMAC for SHA-384 and SHA-512 with keys longer than 64 bytes.

 * In fips mode, RSA keys are now generated using the X9.31 algorithm

   and DSA keys using the FIPS 186-2 algorithm.

 * The transient-key flag is now also supported for DSA key

   generation.  DSA domain parameters may be given as well.

Noteworthy changes in version 1.4.3 (2008-09-18)

------------------------------------------------

 * Try to auto-initialize Libgcrypt to minimize the effect of

   applications not doing that correctly.  This is not a perfect

   solution but given that many applicationion would totally fail

   without such a hack, we try to help at least with the most common

   cases.  Folks, please read the manual to learn how to properly

   initialize Libgcrypt!

 * Auto-initialize the secure memory to 32k instead of aborting the

   process.

 * Log fatal errors via syslog.

 * Changed the name and the semantics of the fips mode config file.

 * Add convenience macro gcry_fips_mode_active.

 * More self-tests.

 * Documentation cleanups.

Noteworthy changes in version 1.4.2 (2008-09-08)

------------------------------------------------

 * The long missing gcry_mpi_lshift function has been added.

 * RSA key generation now supports a "transient-key" flag.

 * The keygrip computation for ECDSA has been implemented thus ECDSA

   is now fully supported.

 * A few macros have been replaced by functions for better type

   checking.

 * The thread initialization structure now carries version

   information.

 * The manual describes more clearly how to initialize Libgcrypt.

 * The library may now be switched into a FIPS mode.

 * Interface changes relative to the 1.3.0 release:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 GCRYCTL_OPERATIONAL_P   NEW.

 GCRYCTL_FIPS_MODE_P     NEW.

 GCRYCTL_FORCE_FIPS_MODE NEW.

 gcry_cipher_setkey      NEW: Replaces macro.

 gcry_cipher_setiv       NEW: Replaces macro.

 gcry_cipher_setctr      NEW: Replaces macro.

 gcry_mpi_lshift         NEW.

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Noteworthy changes in version 1.4.1 (2008-04-25)

------------------------------------------------

 * Fixed a bug introduced by 1.3.1 which led to the comsumption of far

   too much entropy for the intial seeding.

 * Improved AES performance for CFB and CBC modes.

 * Removed build problems for the Padlock support.

Noteworthy changes in version 1.4.0 (2007-12-10)

------------------------------------------------

 * New configure option --disable-padlock-support which is mostly

   useful in case of build problems.

Noteworthy changes in version 1.3.2 (2007-12-03)

------------------------------------------------

 * The visibility attribute is now used if supported by the toolchain.

 * The ACE engine of VIA processors is now used for AES-128.

 * The ASN.1 DER template for SHA-224 has been fixed.

Noteworthy changes in version 1.3.1 (2007-10-26)

------------------------------------------------

 * The entire library is now under the LGPL. The helper programs and

   the manual are under the GPL.  Kudos to Peter Gutmann for giving

   permissions to relicense the rndw32 and rndunix modules.

 * The Camellia cipher is now under the LGPL and included by default.

 * Fixed a bug in the detection of symbol prefixes which inhibited the

   build of optimzied assembler code on certain systems.

 * Updated the entropy gatherer for W32.

Noteworthy changes in version 1.3.0 (2007-05-04)

------------------------------------------------

 * Changed the way the RNG gets initialized. This allows to keep it

   uninitialized as long as no random numbers are used.  To override

   this, the new macro gcry_fast_random_poll may be used.  It is in

   general a good idea to spread this macro into the application code

   to make sure that these polls happen often enough.

 * Made the RNG immune against fork without exec.

 * Reading and writing the random seed file is now protected by a

   fcntl style file lock on systems that provide this function.

 * Support for SHA-224 and HMAC using SHA-384 and SHA-512.

 * Support for the SEED cipher.

 * Support for the Camellia cipher.  Note that Camellia is disabled by

   default, and that enabling it changes the license of libgcrypt from

   LGPL to GPL.

 * Support for OFB encryption mode.

 * gcry_mpi_rshift does not anymore truncate the shift count.

 * Reserved algorithm ranges for use by applications.

 * Support for DSA2.

 * The new function gcry_md_debug should be used instead of the

   gcry_md_start_debug and gcry_md_stop_debug macros.

 * New configure option --enable-random-daemon to support a system

   wide random daemon.  The daemon code is experimental and not yet

   very well working.  It will eventually allow to keep a global

   random pool for the sake of short living processes.

 * Non executable stack support is now used by default on systems

   supporting it.

 * Support for Microsoft Windows.

 * Assembler support for the AMD64 architecture.

 * New configure option --enable-mpi-path for optimized builds.

 * Experimental support for ECDSA; should only be used for testing.

 * New control code GCRYCTL_PRINT_CONFIG to print the build

   configuration.

 * Minor changes to some function declarations.  Buffer arguments are

   now typed as void pointer.  This should not affect any compilation.

   Fixed two bugs in return values and clarified documentation.

 * Interface changes relative to the 1.2.0 release:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 gcry_fast_random_poll	 NEW

 gcry_md_debug           NEW

 gcry_sexp_nth_string    NEW

 GCRY_MD_SHA224          NEW

 GCRY_PK_USAGE_CERT      NEW

 GCRY_PK_USAGE_AUTH      NEW

 GCRY_PK_USAGE_UNKN      NEW

 GCRY_PK_ECDSA           NEW

 GCRY_CIPHER_SEED        NEW

 GCRY_CIPHER_CAMELLIA128 NEW

 GCRY_CIPHER_CAMELLIA192 NEW

 GCRY_CIPHER_CAMELLIA256 NEW

 GCRYCTL_FAKED_RANDOM_P  NEW

 GCRYCTL_PRINT_CONFIG    NEW

 GCRYCTL_SET_RNDEGD_SOCKET  NEW.

 gcry_mpi_scan           CHANGED: Argument BUFFER is now void*.

 gcry_pk_algo_name       CHANGED: Returns "?" instead of NULL.

 gcry_cipher_algo_name   CHANGED: Returns "?" instead of "".

 gcry_pk_spec_t          CHANGED: Element ALIASES is now const ptr.

 gcry_md_write_t         CHANGED: Argument BUF is now a const void*.

 gcry_md_ctl             CHANGED: Argument BUFFER is now void*.

 gcry_cipher_encrypt     CHANGED: Arguments IN and OUT are now void*.

 gcry_cipher_decrypt     CHANGED: Arguments IN and OUT are now void*.

 gcry_sexp_sprint        CHANGED: Argument BUFFER is now void*.

 gcry_create_nonce       CHANGED: Argument BUFFER is now void*.

 gcry_randomize          CHANGED: Argument BUFFER is now void*.

 gcry_cipher_register    CHANGED: Argument ALGORITHM_ID is now int*.

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Noteworthy changes in version 1.2.0 (2004-04-15)

------------------------------------------------

 * First stable release.

Noteworthy changes in version 1.1.94 (2004-03-29)

-------------------------------------------------

 * The support for multi-threaded users goes into its third

   incarnation.  We removed compile time support for thread libraries.

   To support the thread library of your choice, you have to set up

   callback handlers at initialization time.  New data structures, a

   new control command, and default initializers are provided for this

   purpose.

 * Interface changes relative to the 1.1.93 release:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

libgcrypt-config --thread	OBSOLETE

libgcrypt-pth.la		REMOVED

libgcrypt-pthread.la		REMOVED

GCRYCTL_SET_THREAD_CBS		NEW

struct gcrypt_thread_cbs	NEW