Niels Möller
I am pleased to announce the new major release of GNU Nettle, a low-level cryptographic functions library. This release includes several API changes, some of which are quite significant, as well as the removal of deprecated functions. There is one notable new feature: support for SLH-DSA signatures (a stateful hashing-based digital signature algorithm).
This is a new major release. It includes support for SLH-DSA. Several changes have been made to the Nettle API, as well as the removal of deprecated functions. Additionally, the ABI has been improved, resulting in an almost unchanged API, particularly with reduced context structures for several algorithms...
Changes:
- The _digest functions of hash algorithms, MAC, and AEAD no longer accept the desired digest size as an argument; instead, they always return a digest of full size. Accordingly, the type nettle_hash_digest_func has also been changed.
- Functions for processing full messages using CCM AES now take a constant encryption context as the first argument. For example, the first argument of the ccm_aes128_encrypt_message function is now a constant aes128_ctx* structure. Previously, it was a ccm_aes128_ctx* structure that ignored everything except the base encryption context.
- SHA3 functions now use the same sha3_ctx structure for all hash variants, as well as the same sha3_init function. Old names, such as sha3_256_ctx and sha3_256_init, have been defined as preprocessor aliases for backward compatibility.
- The dst_length argument of the base16_decode_update and base64_decode_update functions is now both an input and output argument. It must contain the size of the target buffer for input, and decoding will fail if this size is insufficient. Previously, dst_length was only an output argument, and the target buffer needed to be large enough for any input value of the specified src_length.
Source: linux.org.ru
