Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package leancrypto for openSUSE:Factory checked in at 2025-07-22 12:53:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/leancrypto (Old) and /work/SRC/openSUSE:Factory/.leancrypto.new.8875 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "leancrypto" Tue Jul 22 12:53:53 2025 rev:4 rq:1294406 version:1.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/leancrypto/leancrypto.changes 2025-07-07 14:49:16.319220812 +0200 +++ /work/SRC/openSUSE:Factory/.leancrypto.new.8875/leancrypto.changes 2025-07-22 12:54:04.708502262 +0200 @@ -1,0 +2,21 @@ +Fri Jul 18 13:12:24 UTC 2025 - Lucas Mulling <lucas.mull...@suse.com> + +- Add baselibs.conf + +------------------------------------------------------------------- +Wed Jul 16 17:55:16 UTC 2025 - Lucas Mulling <lucas.mull...@suse.com> + +- Split kernel module into to a separate package as to allow leancrypto to be + part of ring1 following replacement of liboqs in gnutls [jsc#PED-3176] + +------------------------------------------------------------------- +Wed Jul 16 08:33:41 UTC 2025 - Pedro Monreal <pmonr...@suse.com> + +- Update to 1.5.1: + * add ChaCha20 Poly 1305 AEAD + * ChaCha20: add ARMv8 NEON, ARMv7 Neon, Intel AVX2, Intel AVX512, + RISCV RVV/ZBB implementations + * RISC-V entropy source: make implementation consistent to spec + * Unify stack memory allocation + +------------------------------------------------------------------- Old: ---- leancrypto-1.5.0.tar.xz leancrypto-1.5.0.tar.xz.asc New: ---- _multibuild baselibs.conf leancrypto-1.5.1.tar.xz leancrypto-1.5.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ leancrypto.spec ++++++ --- /var/tmp/diff_new_pack.Tn84Jk/_old 2025-07-22 12:54:05.352529081 +0200 +++ /var/tmp/diff_new_pack.Tn84Jk/_new 2025-07-22 12:54:05.352529081 +0200 @@ -16,19 +16,35 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # - -Name: leancrypto -Version: 1.5.0 +%global flavor @BUILD_FLAVOR@%{nil} +%if "%{flavor}" == "kmp" +%define psuffix -kmp +%bcond_without kmp +%else +%define psuffix %{nil} +%bcond_with kmp +%endif + +%define pkgname leancrypto +%define libname lib%{pkgname} +Name: %{pkgname}%{psuffix} +Version: 1.5.1 Release: 1.1 Summary: Cryptographic library with stack-only support and PQC-safe algorithms License: BSD-3-Clause OR GPL-2.0-only URL: https://www.leancrypto.org -Source0: https://www.leancrypto.org/%{name}/releases/%{name}-%{version}/%{name}-%{version}.tar.xz -Source1: https://www.leancrypto.org/%{name}/releases/%{name}-%{version}/%{name}-%{version}.tar.xz.asc +Source0: https://www.leancrypto.org/%{pkgname}/releases/%{pkgname}-%{version}/%{pkgname}-%{version}.tar.xz +Source1: https://www.leancrypto.org/%{pkgname}/releases/%{pkgname}-%{version}/%{pkgname}-%{version}.tar.xz.asc Source2: https://leancrypto.org/about/smuellerDD-2024.asc#/leancrypto.keyring +Source3: baselibs.conf BuildRequires: meson -BuildRequires: %kernel_module_package_buildreqs BuildRequires: clang +%if %{with kmp} +BuildRequires: %kernel_module_package_buildreqs + +%kernel_module_package -n %{pkgname} + +%endif %description Leancrypto provides a general-purpose cryptographic library with PQC-safe @@ -36,10 +52,12 @@ to be used on stack as well as on heap. Accelerated algorithms are transparently enabled if possible. -%package -n lib%{name}1 + +%if %{without kmp} +%package -n %{libname}1 Summary: Cryptographic library with stack-only support and PQC-safe algorithms -%description -n lib%{name}1 +%description -n %{libname}1 Leancrypto provides a general-purpose cryptographic library with PQC-safe algorithms. Further it only has POSIX dependencies, and allows all algorithms to be used on stack as well as on heap. Accelerated algorithms are transparently @@ -48,7 +66,7 @@ %package devel Summary: Development files for leancrypto, a cryptographic library Requires: glibc-devel -Requires: lib%{name}1 = %{version} +Requires: %{libname}1 = %{version} %description devel Leancrypto provides a general-purpose cryptographic library with PQC-safe @@ -61,7 +79,7 @@ %package devel-static Summary: Static library for leancrypto Requires: %{name}-devel = %{version} -Provides: %{name}-devel:%{_libdir}/lib%{name}.a +Provides: %{name}-devel:%{_libdir}/%{libname}.a %description devel-static Leancrypto provides a general-purpose cryptographic library with PQC-safe @@ -72,10 +90,10 @@ This subpackage contains the static version of the library used for development. -%package -n lib%{name}-fips1 +%package -n %{libname}-fips1 Summary: Cryptographic library with stack-only support and PQC-safe algorithms -%description -n lib%{name}-fips1 +%description -n %{libname}-fips1 Leancrypto provides a general-purpose cryptographic library with PQC-safe algorithms. Further it only has POSIX dependencies, and allows all algorithms to be used on stack as well as on heap. Accelerated algorithms are transparently @@ -94,76 +112,87 @@ This subpackage holds the tools provided by the library, such as sha*sum. -%kernel_module_package +%else -%package -n lib%{name}1-kernel -Summary: Cryptographic library with PQC-safe algorithms Kernel Module Package +%package KMP +Summary: Cryptographic library with stack-only support and PQC-safe algorithms +Group: System/Kernel -%description -n lib%{name}1-kernel +%description KMP Leancrypto provides a general-purpose cryptographic library with PQC-safe algorithms. Further it only has POSIX dependencies, and allows all algorithms to be used on stack as well as on heap. Accelerated algorithms are transparently enabled if possible. -This package contains the Linux kernel module version of leancrypto. This -kernel module offers the same APIs and functions in kernel space that are -available in user space. +%endif %prep -%setup -q +%setup -q -n %{pkgname}-%{version} + +%if %{with kmp} set -- * mkdir source cp -ar "$@" source/ - # broken symlink rm source/linux_kernel/kyber768/armv8/kyber_poly_armv8.c - mkdir obj +%endif %build %meson -Dseedsource=esdm +# Only build the lib when we need it, if building the kernel module, just build +# the kernel module. +%if %{without kmp} %meson_build +%else for flavor in %flavors_to_build; do KERNELRELEASE=`make -s -C /%{_prefix}/src/linux-obj/%{_target_cpu}/$flavor kernelrelease` rm -rf obj/$flavor cp -r source obj/$flavor make -C $PWD/obj/$flavor/linux_kernel KERNELRELEASE=$KERNELRELEASE done +%endif %check +%if %{without kmp} %meson_test --suite regression +%endif %install +%if %{without kmp} %meson_install +%else export INSTALL_MOD_PATH=$RPM_BUILD_ROOT export INSTALL_MOD_DIR=updates for flavor in %flavors_to_build; do KERNELRELEASE=`make -s -C /%{_prefix}/src/linux-obj/%{_target_cpu}/$flavor kernelrelease` make -C obj/$flavor/linux_kernel modules_install M=$PWD/obj/$flavor KERNELRELEASE=$KERNELRELEASE done +%endif -%ldconfig_scriptlets -n lib%{name}1 -%ldconfig_scriptlets -n lib%{name}-fips1 +%if %{without kmp} +%ldconfig_scriptlets -n %{libname}1 +%ldconfig_scriptlets -n %{libname}-fips1 -%files -n lib%{name}1 +%files -n %{libname}1 %license LICENSE LICENSE.bsd LICENSE.gplv2 -%{_libdir}/lib%{name}.so.* +%{_libdir}/%{libname}.so.* %files devel %doc README.md CHANGES.md %{_includedir}/%{name}.h %{_includedir}/%{name} -%{_libdir}/lib%{name}.so -%{_libdir}/lib%{name}-fips.so +%{_libdir}/%{libname}.so +%{_libdir}/%{libname}-fips.so %{_libdir}/pkgconfig/%{name}-fips.pc %{_libdir}/pkgconfig/%{name}.pc %files devel-static -%{_libdir}/lib%{name}.a -%{_libdir}/lib%{name}-fips.a +%{_libdir}/%{libname}.a +%{_libdir}/%{libname}-fips.a -%files -n lib%{name}-fips1 -%{_libdir}/lib%{name}-fips.so.* +%files -n %{libname}-fips1 +%{_libdir}/%{libname}-fips.so.* %files -n %{name}-tools %{_libexecdir}/%{name} @@ -174,4 +203,5 @@ %{_libexecdir}/%{name}/sha3-384sum %{_libexecdir}/%{name}/sha3-512sum %{_libexecdir}/%{name}/ascon256-sum +%endif ++++++ _multibuild ++++++ <multibuild> <package>kmp</package> </multibuild> ++++++ baselibs.conf ++++++ libleancrypto1 libleancrypto-fips1 leancrypto-devel requires -libleancrypto-<targettype> requires "libleancrypto1-<targettype> = <version>" ++++++ leancrypto-1.5.0.tar.xz -> leancrypto-1.5.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/leancrypto/leancrypto-1.5.0.tar.xz /work/SRC/openSUSE:Factory/.leancrypto.new.8875/leancrypto-1.5.1.tar.xz differ: char 26, line 1
