cryptonite 0.12 → 0.13

raw patch · 3 files changed

+8/−2 lines, 3 filesPVP ok

version bump matches the API change (PVP)

API changes (from Hackage documentation)

Files

CHANGELOG.md +6/−0
cbits/cryptonite_sha512.h +1/−1
cryptonite.cabal +1/−1

CHANGELOG.md view

@@ -1,3 +1,9 @@+## 0.13++* *SECURITY* Fix buffer overflow issue in SHA384, copying 16 extra bytes from+  the SHA512 context to the destination memory pointer leading to memory+  corruption, segfault. (Mikael Bung)+ ## 0.12  * Fix compilation issue with Ed448 on 32 bits machine.

cbits/cryptonite_sha512.h view

@@ -35,7 +35,7 @@  #define sha384_ctx sha512_ctx -#define SHA384_DIGEST_SIZE	64+#define SHA384_DIGEST_SIZE	48 #define SHA384_CTX_SIZE		sizeof(struct sha384_ctx)  #define SHA512_DIGEST_SIZE	64

cryptonite.cabal view

@@ -1,5 +1,5 @@ Name:                cryptonite-Version:             0.12+Version:             0.13 Synopsis:            Cryptography Primitives sink Description:     A repository of cryptographic primitives.