libtom

libtommath 1.3.0

2024-04-03T00:00:00-00:00

Hi,

we recently released libtommath 1.3.0.

[ltm-1.3.0.tar.xz] [tar.xz.asc]

[ltm-1.3.0.zip] [zip.asc]

For details on the changes included, please have a look at the news entry regarding the Release Candidate.

Have fun,

Steffen

libtommath 1.3.0 was originally published by Team libtom at libtom on April 03, 2024.

libtommath 1.3.0 RC1

2024-03-19T00:00:00-00:00

Hi,

I just tagged the first RC of libtommath 1.3.0.

[ltm-1.3.0-rc1.tar.xz] [tar.xz.asc]

[ltm-1.3.0-rc1.zip] [zip.asc]

This release is done in preparation for libtommath 2.0.0 which will deprecate multiple public parts of the API, both functions and macros.

Additionally we’ve included CMake as build system and use GitHub Actions to verify that everything works as expected.

All to-be-deprecated parts are marked as either MP_DEPRECATED() for functions or MP_DEPRECATED_PRAGMA() for macros. Your compiler should complain if you use those to-be-deprecated parts, if not it’s most likely a pretty old version of the compiler or not correctly configured.

Please feel free to reach out to us via the known channels if this RC causes any issues for you.

Cheers,

Steffen

libtommath 1.3.0 RC1 was originally published by Team libtom at libtom on March 19, 2024.

libtommath 1.2.1

2023-09-04T00:00:00-00:00

Hi,

I just tagged libtommath 1.2.1.

[ltm-1.2.1.tar.xz] [tar.xz.asc]

[ltm-1.2.1.zip] [zip.asc]

This is a bugfix release only containing the fix to a potential integer underflow which got assigned CVE-2023-36328.

Cheers,

Steffen

libtommath 1.2.1 was originally published by Team libtom at libtom on September 04, 2023.

libtommath 1.2.0

2019-10-22T00:00:00-00:00

Hi,

I just tagged libtommath 1.2.0.

[ltm-1.2.0.tar.xz] [tar.xz.asc]

[ltm-1.2.0.zip] [zip.asc]

For details on the changes included, please have a look at the news entry regarding the Release Candidates.

Have fun,

Steffen

libtommath 1.2.0 was originally published by Team libtom at libtom on October 22, 2019.

libtommath 1.2.0 RC1 RC2 RC3

2019-10-21T00:00:00-00:00

Hej Hej,

I just tagged the ~~first~~ ~~second~~ third and hopefully final Release Candidate of libtommath 1.2.0.

A selection of API functions, Macros and symbols are now marked as deprecated.

It is planned that this is the last version with the old API.

[ltm-1.2.0-rc3.tar.xz] [tar.xz.asc]

[ltm-1.2.0-rc3.zip] [zip.asc]

Please have a look at changes.txt for all the changes included.

The following list contains things that will change after the release, some of it can already be on develop when you read this.

deprecated functions will be removed
functions from tommath_private.h will be hidden
support for 8-Bit architectures will be dropped
function arguments will have their type changed to size_t if appropriate
return values and some of the function arguments will use enum types

This list is most likely not final :-)

If you’re having issues with this Release Candidate please report on the [ML] or [GitHub].

Cheers,

Steffen

libtommath 1.2.0 ~~RC1~~ ~~RC2~~ RC3 was originally published by Team libtom at libtom on October 16, 2019.

libtommath 1.1.0

2019-01-28T00:00:00-00:00

Today I finally tagged the release of libtommath 1.1.0 after roughly a month since the first RC and 4 more RC’s in between since there were still some minor issues to be solved.

Thanks for all the Feedback, especially Christoph Zurnieden for creating the patch for MoarVM and testing everything, Dominique Dumont from Debian for pushing for a new release, Jan Nijtmans (TCL) and Pietro Cerutti (FreeBSD) for testing the RC’s.

[ltm-1.1.0.tar.xz] [tar.xz.asc]

[ltm-1.1.0.zip] [zip.asc]

Please have a look at changes.txt resp. [Milestone v1.1.0] for a detailed list of all changes.

Cheers,

Steffen

libtommath 1.1.0 was originally published by Team libtom at libtom on January 28, 2019.

libtommath 1.1.0 RC1

2018-12-31T00:00:00-00:00

I’m happy to announce the first Release Candidate of libtommath 1.1.0 (Hopefully still in time to land in Debian Buster).

We decided internally to re-license the library to The Unlicense which will hopefully end the discussions about the inappropriate wording of the WTFPL and the legal trouble related to the Public Domain in countries where the PD is not a legal concept. (The other libraries will be re-licensed soon as well!)

The two major additions are:

FIPS 186.4 compliant prime-number checking
Functions to set&get double values and two’s-complement API functions

The most important changes are:

constification of all API functions
The implementation of platform-specific entropy sources for mp_rand()

Besides that there were a load of minor additions, improvements, bugfixes etc.

[ltm-1.1.0-rc1.tar.xz] [tar.xz.asc]

[ltm-1.1.0-rc1.zip] [zip.asc]

Please have a look at changes.txt resp. [Milestone v1.1.0] for a detailed list of all changes.

If you’re having issues with the RC1 please report on the [ML] or [GitHub].

Cheers,

Steffen

libtommath 1.1.0 RC1 was originally published by Team libtom at libtom on December 31, 2018.

libtomcrypt 1.18.2

2018-07-02T00:00:00-00:00

Hey folks,

we proudly present you the second bugfix-release of libtomcrypt, a.k.a. version 1.18.2.

The tarballs of the release can be downloaded here:

[crypt-1.18.2.tar.xz] [tar.xz.asc]

[crypt-1.18.2.zip] [zip.asc]

To get a detailed view of the fixes included, have a look at the changes document in the archive or the repository.

Cheers,

Karel & Steffen

P.S.: If you experience any issues, feel free to drop us a mail on the [ML] or open a PR on [GitHub].

libtomcrypt 1.18.2 was originally published by Team libtom at libtom on July 02, 2018.

libtomcrypt 1.18.1

2018-01-22T00:00:00-00:00

Hej hej,

welcome to the first bugfix-release of libtomcrypt, now version 1.18.1.

The tarballs of the release can be downloaded here:

[crypt-1.18.1.tar.xz] [tar.xz.asc]

[crypt-1.18.1.zip] [zip.asc]

To get a detailed view of the fixes included, have a look at the changes document in the archive or the repository.

Cheers,

Karel & Steffen

P.S.: If you experience any issues, feel free to drop us a mail on the [ML] or open a PR on [GitHub].

libtomcrypt 1.18.1 was originally published by Team libtom at libtom on January 22, 2018.

libtomcrypt 1.18.0

2017-10-10T00:00:00-00:00

Hi Folks,

finally we’ve mangaged to finish version 1.18.0 of libtomcrypt.

There were some minor changes since the RC5, namely:

A fix regarding ltc_mp_digit when compiling for win64.
Fixing the build when building on a machine without git installed.

The tarballs of the release can be downloaded here:

[crypt-1.18.0.tar.xz] [tar.xz.asc]

[crypt-1.18.0.zip] [zip.asc]

After nearly 1400 commits over the last 10 years there were some changes accumulated… :) Therefore we’re splitting this summary here up in bugfixes, cryptographic fixes, major additions and major improvements. A detailed list of all changes is included in the changes file.

Bugfixes

Multi2 decrypt operation was broken when a non-standard number of rounds is used. 21ddcf35681916c091ae91e7e8e5bd6bdf8ab51d
Noekeon decrypt and encrypt operations were broken. 6dc089015adfc4f66679b6b680476422bd6b6c01
XTEA decrypt and encrypt operations were broken. 2526d5df8f9a228cf20ba90982aed4a5e951ac5f
The Windows implementation of rng_get_bytes() tried to read from c:\dev\urandom resp. c:\dev\random before using the Windows CSP. b36e75b7f12c75bd852b8bcee36ea6bd9727d5c0
rsa_make_key() could try to free uninitialized variables in case something in the MPI provider went wrong. 98893c077bd603d5c1aeb972a88c23ffe59a8ae6
The RSA/PKCS#1 v2.0 PSS hash verification was broken in cases where bitlength(key) % 8 == 1. 3324da26019640d7df72841f5e644d7e42a6b8f6
Camellia decrypt operation was broken (which only plays a role if you used Tom’s last tarball as it wasn’t in 1.17 yet). 45dcbc654d5867bb5ee475b9b1be0b2c3959d0de
Issues reported by miscellaneous analysers (valgrind, asan, ubsan, clang/scan-build, coverity).

Cryptographic fixes

A Bleichenbacher Signature attack was fixed in the RSA/PKCS#1 v1.5 EMSA code. 5eb9743410ce4657e9d54fef26a2ee31a1b5dd09
Fixed potential Timing attacks in EAX, OCB and OCBv3. 05e28d6cfa473e5c6e312ef8bfe6137bc8caa0da
Fixed potential Timing attack in CCM. (09e4b0ec9b46ac4db3fa904658821c54106a1d0e & 75b114517a3f8db2075a45b0af87d4d74778ad66)
Fixed potential counter reuse in GCM. 7d418b34b3fe6d49354d5a9ef5a442c387a1bd06

Major additions

Blake2b & Blake2s (hash & mac)
ChaCha (stream cipher), Poly1305 (mac), ChaCha20Poly1305 (encauth)
Diffie-Hellman (has been revived from an earlier version and re-worked)
SHA3 (incl. SHAKE3)
OCBv3 (encauth)
Camellia (block cipher)
New stream cipher API (ChaCha, RC4, Sober128)
ChaCha20-based PRNG
RSA - loading keys PKCS#8 (private) and X.509 (public)

Major improvements

Re-worked all makefiles.
Fixed a bunch of build issues on a lot of platforms.
ECC, DSA and RSA hardened in multiple ways.

Thanks go out to all contributors and bug reporters. I wanted to thank especially Karel, who’s using the library in his PERL bindings perl-CryptX, and Larry Bugbee, who both contributed loads of improvements and invaluable feedback (before and behind the scenes). Thanks go also out to @rolf0r, François Perrad, all the OS package maintainers who reported feedback and organisations like Linaro who are using the library in their OP-TEE environment and upstreamed some nice patches.

Let’s see how this goes on and hopefully evolves into a 2.0 version of the library :)

Cheers,

Karel & Steffen

P.S.: If you experience any issues, feel free to drop us a mail on the [ML] or open a PR on [GitHub].

libtomcrypt 1.18.0 was originally published by Team libtom at libtom on October 10, 2017.

libtomcrypt 1.18.0 RC5

2017-10-02T00:00:00-00:00

Hello everybody,

okay, now it should really be the last Release Candidate of libtomcrypt 1.18, Number 5.

[crypt-1.18.0-rc5.tar.xz] [tar.xz.asc]

[crypt-1.18.0-rc5.zip] [zip.asc]

Here’s the list with the biggest changes since RC4.

The ABI version/SONAME had to be bumped to 1:0 after Dan Fandrich of Mageia Linux pointed out that the ABI is incompatible to 1.17. But this release should still be a more or less drop-in update from 1.17 (but it requires re-compiling and re-linking).
Rob Swindell discovered an issue when rsa_import()‘ing keys where we would use a lot too much memory. This lead to a bigger PR which also removed the MIN_RSA_SIZE and MAX_RSA_SIZE macros…
makefile.shared can now also be used on cygwin.

Again, if you’re having issues with the RC5 you know where to report: [ML] or [GitHub].

Cheers,

Karel & Steffen

libtomcrypt 1.18.0 RC5 was originally published by Team libtom at libtom on October 02, 2017.

libtomcrypt 1.18.0 RC4

2017-10-02T00:00:00-00:00

Hello everybody,

we just created the fourth (and hopefully last) Release Candidate of libtomcrypt 1.18.

[crypt-1.18.0-rc4.tar.xz] [tar.xz.asc]

[crypt-1.18.0-rc4.zip] [zip.asc]

Here’s the list with the biggest changes since RC3.

RSA and DSA pass now all the tests provided by Google’s “Wycheproof” and Kudelski Security’s “CDF”
Andrew Janke provided some fixes targeting builds on Mac OS
improved the validation of DSA keys
fixed bugs in ChaCha and GCM where we wouldn’t enforce that there’s an IV set
fixed some minor issues in tests&demos
where possible we changed all appearances of char* to const char*
finished the documentation (proof readers are still welcome :) )

Yep we had again some smaller API changes, but I think it’s worth it as const char* is the correct data type for all these parameters/struct members.

The “Wycheproof” and “CDF” tests aren’t directly implemented in the library, but they’re tested via Karel’s [perl-CryptX]. You should really have a look at it.

To make RSA and DSA pass these tests we had to change the behavior of der_decode_sequence(). The new behavior is that der_decode_sequence() is stricter on the validation of the length of the input. Before it was possible to successfully decode parts of a sequence, this isn’t possible anymore.

Again, if you’re having issues with the RC4 you know where to report: [ML] or [GitHub].

Cheers,

Karel & Steffen

libtomcrypt 1.18.0 RC4 was originally published by Team libtom at libtom on September 25, 2017.

libtommath 1.0.1

2017-08-29T00:00:00-00:00

I just tagged libtommath 1.0.1, a bugfix-only release.

[ltm-1.0.1.tar.xz] [tar.xz.asc]

[ltm-1.0.1.zip] [zip.asc]

Please have a look at changes.txt for all the fixes included.

If you’re having issues please have a look on [GitHub] or report directly to the [ML].

Cheers,

Steffen

libtommath 1.0.1 was originally published by Team libtom at libtom on August 29, 2017.

libtommath 1.0.1 RC1

2017-10-02T00:00:00-00:00

I just created the first Release Candidate of libtommath 1.0.1, a bugfix-only release.

[ltm-1.0.1-rc1.tar.xz] [tar.xz.asc]

[ltm-1.0.1-rc1.zip] [zip.asc]

Please have a look at changes.txt for all the fixes included.

If you’re having issues with the RC1 please report on the [ML] or [GitHub].

Cheers,

Steffen

libtommath 1.0.1 RC1 was originally published by Team libtom at libtom on August 28, 2017.

libtomcrypt 1.18.0 RC3

2017-10-02T00:00:00-00:00

Hello everybody,

we just created the third Release Candidate of libtomcrypt 1.18.

[crypt-1.18.0-rc3.tar.xz] [tar.xz.asc]

[crypt-1.18.0-rc3.zip] [zip.asc]

And again we had some smaller API changes…

Here’s the list with the biggest changes since RC2, the changes that are left out were pure cosmetics.

found out that OCBv3 was implemented according to draft-2 of the standard and fixed it to be RFC compliant (that’s one API change)
fixed the DSA timing when building for TFM (as TFM is still fixed size, the default configuration can’t be used to do PK crypto with 4kbit sized keys)
fixed a build issue where the wrong endianness was detected with gcc-arm-none-eabi-5_4-2016q3
Larry Bugbee improved demo_dynamic.py and made it Python3 compatible
improved constants and sizes demos
improved the README.md
really fixed docs generation with TeX Live 2017
make test and make timing can now also be built without an MPI provider
added a makefile target help (only available in makefile and makefile.shared)

Again, if you’re having issues with the RC3 you know where to report: [ML] or [GitHub].

Cheers,

Karel & Steffen

libtomcrypt 1.18.0 RC3 was originally published by Team libtom at libtom on August 24, 2017.

libtomcrypt 1.18.0 RC2

2017-10-09T00:00:00-00:00

Hello everybody,

we just created the second Release Candidate of libtomcrypt 1.18.

[crypt-1.18.0-rc2.tar.xz] [tar.xz.asc]

[crypt-1.18.0-rc2.zip] [zip.asc]

Well, the plan to not change the API didn’t hold, but it’s only minor and now more in-line with what we already added.

Here’s the list with the biggest changes since RC1, the changes that are left out were pure cosmetics.

fixed docs generation with TeX Live 2017
fixed the default make-target of makefile and makefile.shared (oops)
fixed some scenarios where the build could fail because of wrongly ordered includes
added an uninstall make-target
improved the GCM API by some potential use-cases
updated the API of dh_set_key() and dsa_set_key()

Again, if you’re having issues with the RC2 you know where to report: [ML] or [GitHub].

I received the question which versions of libtommath and/or tomsfastmath are at least required to be able to build the RC with MPI providers:

libtommath - v0.42.0
tomsfastmath (static library) - v0.13.0
tomsfastmath (shared library) - current develop [tfm/develop] or newer

Cheers,

Karel & Steffen

libtomcrypt 1.18.0 RC2 was originally published by Team libtom at libtom on July 13, 2017.

libtomcrypt 1.18.0 RC1

2017-10-02T00:00:00-00:00

Hey folks,

we just created the first Release Candidate of libtomcrypt 1.18, which should be feature complete.

[crypt-1.18.0-rc1.tar.xz] [tar.xz.asc]

[crypt-1.18.0-rc1.zip] [zip.asc]

There are no further API changes or additions planned.

The only open points are now updates to the documentation to reflect the current state of implementation. If you feel like you want to contribute something, feel free to take up an item from [1].

A complete short summary of the changes since 1.17 isn’t really possible as it’s now ~ 1100 commits away…

The most important changes/additions are:

added a new stream cipher type
added Camellia (block cipher), ChaCha20 (stream cipher), SHA3 (hash), Blake2b & Blake2s (hash&mac), Poly1305 (mac), ChaCha20Poly1305 & OCB3 (encauth)
added HKDF, openssl-compliant PKCS#5, …
brought back Diffie-Hellman
made DSA key generation (mostly) FIPS compliant
and most importantly: AFAWK we didn’t break the API (yet…)

… to have a complete view of the changes, have a look at the ‘changes’ file in the tar-ball.

If you’re having issues with the RC1 feel free to report this via the ML [2] or via a Github issue [3].

If you didn’t notice yet, we’re now testing all changes in most configuration options via a huge build matrix on Travis-CI [4] with libtommath as well as tomsfastmath, c.f. travis.yml:35..36.

As our builds currently expand to around 5 hours of total build time, we were very pleased that the travis team extended our free plan to 10 build jobs so we have a result already after less than 40 minutes.

To be able to test the RC1 with libtommath and/or tomsfastmath, please make sure to get an up-to-date version of the math library.

As there are no up-to-date versions in the default repositories of Ubuntu we started to provide our own builds of tomsfastmath via packagecloud [5]. The packagecloud team also extended our plan for free, otherwise we wouldn’t have been able to finish the RC1 in time.

Cheers,

Karel & Steffen

libtomcrypt 1.18.0 RC1 was originally published by Team libtom at libtom on July 05, 2017.

Site relaunch

2015-11-02T00:00:00-00:00

The site has relaunched. With a bit of luck it won’t go stale.

Site relaunch was originally published by Team libtom at libtom on November 02, 2015.

All libtom projects have been re-licensed and some other news

2010-10-26T00:00:00-00:00

All projects that are in the git repositories have been re-licensed under the WTFPL, these are now 5 projects - libtomcrypt, libtommath and tomsfastmath - and we’ve also added git repositiories for libtomfloat and libtompoly. We’ve created an organization on github called ‘libtom’, all the repositories can now be found under this organization. Everybody who has cloned the old repositories should update the remote, the old repositories aren’t available anymore since they were moved by the github team. Steffen

All libtom projects have been re-licensed and some other news was originally published by Team libtom at libtom on October 26, 2010.

libtommath v0.42.0 released

2018-01-22T00:00:00-00:00

This release fixes a bug in libtommath’s mp_prime_next_prime() function which could result under rare circumstances a non-prime integer to be returned. Users of libtomcrypt are not affected by this issue, however some implementations using mp_prime_next_prime() are highly advised to upgrade. This release also includes a fix to mp_shrink() and adds the required files to compile libtommath from Visual Studio 2005/2008 directly. This release was possible thanks to Steffen Jaeckel! Also note the new release numbers are now “x.y.z” (and no longer only “x.y”). If you have any suggestion, remember that you can join the group on Google Groups! Mark

libtommath v0.42.0 released was originally published by Team libtom at libtom on July 23, 2010.