oqs-provider-0.6.1-1.2 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

This is a plugin/shared library making available quantum-safe cryptography
(QSC) to OpenSSL 3.x installations via the Provider API.

Sample call:

openssl-3 ciphers -provider oqsprovider

Provides

• oqs-provider
• oqs-provider(x86-64)

Requires

• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• liboqs.so.6()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

MIT

Changelog

* Tue Jun 18 2024 Marcus Meissner <meissner@suse.com>
  - updated to 0.6.1
    - CVE-2024-37305: Fixed buffer overflow in deserialization of hybrid
      keys and signatures (bsc#1226468)
* Tue Jun 11 2024 Marcus Meissner <meissner@suse.com>
  - updated to 0.6.0
    - First availability of standardized PQ algorithms, e.g., ML-KEM, ML-DSA
    - Support for Composite PQ operations
    - Alignment with PQ algorithm implementations as provided by liboqs 0.10.0, most notably updating HQC and Falcon.
    - Implementation of security code review recommendations
    - Support for more hybrid operations as fully documented here.
    - Support for extraction of classical and hybrid key material
  - updated to 0.5.3
    - only tracking parallel liboqs security update
  - updated to 0.5.2
    - Algorithm updates as documented in the liboqs 0.9.0 release notes
    - Standard coding style
    - Enhanced memory leak protection
    - Added community cooperation documentation
    - (optional) KEM algorithm en-/decoder feature
* Tue Sep 19 2023 Marcus Meissner <meissner@suse.com>
  - updated to 0.5.1
    - Documentation update
    - document specs
    - General documentation overhaul
    - change TLS demo to use QSC alg
    - Build a module instead of a shared library.
    - explain groups in USAGE
* Tue Jun 13 2023 Marcus Meissner <meissner@suse.com>
  - updated to 0.5.0:
    - oqs-provider now also enables use of QSC algorithms during TLS1.3
      handshake. The required OpenSSL code updates are contained in
      openssl/openssl#19312.
    * Algorithm updates
      All algorithms no longer supported in the NIST PQC competition
      and not under consideration for standardization by ISO have been
      removed. All remaining algorithms with the exception of McEliece
      have been lifted to their final round 3 variants as documented in
      liboqs. Most notably, algorithm names for Sphincs+ have been changed
      to the naming chosen by its authors.
    * Functional updates
    - Enablement of oqs-provider as a (first) dynamically fetchable OpenSSL3 TLS1.3 signature provider.
    - OSX support
    - Full support for CA functionality
    - Algorithms can now be selected by their respective bit strength using the property string "oqsprovider.security_bits"
    - Documentation of (O)IDs used by the different PQC algorithms used and supported in current and past releases of oqs-openssl and oqs-provider
    - Graceful handling (by way of functional degradation) of the feature sets contained in different OpenSSL releases; all oqsprovider capabilities are only available when using a version > than OpenSSL3.1.
    - A bug regarding handling of hybrid algorithms has been fixed as well as some memory leaks.
    * Misc updates
    - Dynamic code point and OID changes via environment variables. See ALGORITHMS.md.
    - Dynamic key encoding changes via environment variable using external qsc_key_encoder library. See ALGORITHMS.md.
  - oqs-provider-shared-liboqs.patch: removed, not needed anymore
  - updated to 0.4.0:
    * Security considerations
    - This release removes Rainbow level 1 and all variants of SIDH and
      SIKE due to cryptanalytic breaks of those algorithms. Users are advised
      to move away from use of those algorithms immediately.
    * Algorithm updates
    - Removal of SIKE/SIDH and Rainbow level I due to cryptographic breaks
    * Functional updates
    - Addition of quantum-safe CMS operations via the OpenSSL interface
    - Addition of quantum-safe dgst operations via the OpenSSL interface
    * Misc updates
    - Additional testing
    - Integration with and of OpenSSL test harness
* Tue Nov 15 2022 Jan Engelhardt <jengelh@inai.de>
  - Update descriptions
* Mon Nov 14 2022 Marcus Meissner <meissner@suse.com>
  - initial import of openssl-3 plugin for liboqs

Files

/usr/lib64/ossl-modules
/usr/lib64/ossl-modules/oqsprovider.so
/usr/share/licenses/oqs-provider
/usr/share/licenses/oqs-provider/LICENSE.txt

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Nov 14 00:03:47 2024