Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libgcrypt for openSUSE:Factory checked in at 2026-02-24 15:38:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libgcrypt (Old) and /work/SRC/openSUSE:Factory/.libgcrypt.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libgcrypt" Tue Feb 24 15:38:23 2026 rev:112 rq:1334407 version:1.12.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libgcrypt/libgcrypt.changes 2026-01-08 15:26:37.199039498 +0100 +++ /work/SRC/openSUSE:Factory/.libgcrypt.new.1977/libgcrypt.changes 2026-02-24 15:38:50.963038690 +0100 @@ -1,0 +2,42 @@ +Fri Feb 20 13:49:25 UTC 2026 - Angel Yankov <[email protected]> + +- Update to 1.12.1 + * Various fixes + - Drop libgcrypt-1.12.0-ec_regression.patch + +------------------------------------------------------------------- +Thu Jan 29 14:10:34 UTC 2026 - Angel Yankov <[email protected]> + +- Update to 1.12.0 + * New and extended interfaces: + - Allow access to the FIPS service indicator via the new + GCRYCTL_FIPS_SERVICE_INDICATOR control code. + - Make SHA-1 non-FIPS internally for the 1.12 API + - Add Dilithium (ML-DSA) support + - Support optional random-override and support byte string data + * Bug fixes: + - Use secure MPI in _gcry_mpi_assign_limb_space. + - Use CSIDL_COMMON_APPDATA instead of /etc on Windows. + - Apply a Kyber patch from upstream. + - Fix an edge case in Jent initialization. + - mceliece6688128f: Fix stack overflow crash on win64/wine + * Performance: + - Many performance improvements, new AVX512 implementations for modern CPUs. + - Add RISC-V Zbb+Zbc implementation of CRC. + - Add RISC-V vector cryptography implementation of GHASH, AES, SHA256 and SHA512 + - Add AVX2 and AVX512 code paths to improve CRC. + For a full changelog, see: + https://dev.gnupg.org/source/libgcrypt/history/master/;libgcrypt-1.12.0 + * Dropped libgcrypt-1.11.1-public-SLI-API.patch - applied upstream + * Rebased libgcrypt-CVE-2024-2236.patch + * Rebased libgcrypt-FIPS-SLI-hash-mac.patch + * Rebased libgcrypt-FIPS-SLI-kdf-leylength.patch + * Rebased libgcrypt-FIPS-SLI-pk.patch + * Rebased libgcrypt-FIPS-jitter-standalone.patch + * Rebased libgcrypt-FIPS-rndjent_poll.patch + * Rebased libgcrypt-nobetasuffix.patch + * Rebased libgcrypt-rol64-redefinition.patch + * Added libgcrypt-1.12.0-ec_regression.patch + * libgcrypt 1.12.0: gcry_mpi_ec_curve_point corrupts point + +------------------------------------------------------------------- Old: ---- libgcrypt-1.11.1-public-SLI-API.patch libgcrypt-1.11.2.tar.bz2 libgcrypt-1.11.2.tar.bz2.sig New: ---- libgcrypt-1.12.1.tar.bz2 libgcrypt-1.12.1.tar.bz2.sig ----------(Old B)---------- Old: https://dev.gnupg.org/source/libgcrypt/history/master/;libgcrypt-1.12.0 * Dropped libgcrypt-1.11.1-public-SLI-API.patch - applied upstream * Rebased libgcrypt-CVE-2024-2236.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libgcrypt.spec ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:51.779072564 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:51.783072730 +0100 @@ -1,7 +1,7 @@ # # spec file for package libgcrypt # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -21,7 +21,7 @@ %define libsoname %{name}%{libsover} %define hmac_key orboDeJITITejsirpADONivirpUkvarP Name: libgcrypt -Version: 1.11.2 +Version: 1.12.1 Release: 0 Summary: The GNU Crypto Library License: GPL-2.0-or-later AND LGPL-2.1-or-later AND GPL-3.0-or-later @@ -38,8 +38,6 @@ Patch1: libgcrypt-1.10.0-allow_FSM_same_state.patch #PATCH-FIX-OPENSUSE Do not pull revision info from GIT when autoconf is run Patch2: libgcrypt-nobetasuffix.patch -#PATCH-FIX-SUSE: Make the revamped SLI api public -Patch3: libgcrypt-1.11.1-public-SLI-API.patch # FIPS patches: #PATCH-FIX-SUSE bsc#1190700 FIPS: Provide a service-level indicator for PK Patch100: libgcrypt-FIPS-SLI-pk.patch @@ -61,10 +59,10 @@ Patch109: libgcrypt-CVE-2024-2236.patch BuildRequires: automake >= 1.14 -BuildRequires: pkgconfig(gpg-error) >= 1.49 BuildRequires: libtool BuildRequires: makeinfo BuildRequires: pkgconfig +BuildRequires: pkgconfig(gpg-error) >= 1.56 %{?suse_build_hwcaps_libs} %description @@ -114,7 +112,7 @@ find . -type f -name "jitterentropy*" -print -delete %build -export PUBKEYS="dsa elgamal rsa ecc kyber" +export PUBKEYS="dsa elgamal rsa ecc kyber dilithium" export CIPHERS="arcfour blowfish cast5 des aes twofish serpent rfc2268 seed camellia idea salsa20 gost28147 chacha20 sm4 aria" export DIGESTS="crc gostr3411-94 md4 md5 rmd160 sha1 sha256 sha512 sha3 tiger whirlpool stribog blake2 sm3" export KDFS="s2k pkdf2 scrypt" ++++++ libgcrypt-1.11.2.tar.bz2 -> libgcrypt-1.12.1.tar.bz2 ++++++ ++++ 45463 lines of diff (skipped) ++++++ libgcrypt-CVE-2024-2236.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.599148117 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.607148449 +0100 @@ -19,10 +19,10 @@ src/const-time.h | 6 ++++++ 2 files changed, 8 insertions(+) -Index: libgcrypt-1.11.1/cipher/rsa-common.c +Index: libgcrypt-1.12.0/cipher/rsa-common.c =================================================================== ---- libgcrypt-1.11.1.orig/cipher/rsa-common.c -+++ libgcrypt-1.11.1/cipher/rsa-common.c +--- libgcrypt-1.12.0.orig/cipher/rsa-common.c ++++ libgcrypt-1.12.0/cipher/rsa-common.c @@ -28,6 +28,7 @@ #include "cipher.h" #include "pubkey-internal.h" @@ -344,10 +344,10 @@ if (!seed) { rc = gpg_err_code_from_syserror (); -Index: libgcrypt-1.11.1/src/const-time.h +Index: libgcrypt-1.12.0/src/const-time.h =================================================================== ---- libgcrypt-1.11.1.orig/src/const-time.h -+++ libgcrypt-1.11.1/src/const-time.h +--- libgcrypt-1.12.0.orig/src/const-time.h ++++ libgcrypt-1.12.0/src/const-time.h @@ -26,6 +26,7 @@ #define ct_not_memequal _gcry_ct_not_memequal #define ct_memequal _gcry_ct_memequal @@ -377,45 +377,45 @@ /* * Return 0 if A is 0 and return 1 otherwise. -@@ -114,7 +129,7 @@ unsigned int _gcry_ct_memequal (const vo - DEFINE_CT_TYPE_GEN_MASK(uintptr, uintptr_t) +@@ -115,7 +130,7 @@ DEFINE_CT_TYPE_GEN_MASK(uintptr, uintptr DEFINE_CT_TYPE_GEN_MASK(ulong, unsigned long) DEFINE_CT_TYPE_GEN_MASK(int16, int16_t) + DEFINE_CT_TYPE_GEN_MASK(u64, u64) - +DEFINE_CT_TYPE_GEN_MASK(uchar, unsigned char) /* * Return all bits set if A is 0 and return 1 otherwise. */ -@@ -139,7 +154,7 @@ DEFINE_CT_TYPE_GEN_MASK(int16, int16_t) - DEFINE_CT_TYPE_GEN_INV_MASK(uintptr, uintptr_t) +@@ -141,7 +156,7 @@ DEFINE_CT_TYPE_GEN_INV_MASK(uintptr, uin DEFINE_CT_TYPE_GEN_INV_MASK(ulong, unsigned long) DEFINE_CT_TYPE_GEN_INV_MASK(int16, int16_t) + DEFINE_CT_TYPE_GEN_INV_MASK(u64, u64) - +DEFINE_CT_TYPE_GEN_INV_MASK(uchar, unsigned char) /* * Return A when OP_ENABLED=1 * otherwise, return B -@@ -155,7 +170,7 @@ DEFINE_CT_TYPE_GEN_INV_MASK(int16, int16 - DEFINE_CT_TYPE_SELECT_FUNC(uintptr, uintptr_t) +@@ -158,7 +173,7 @@ DEFINE_CT_TYPE_SELECT_FUNC(uintptr, uint DEFINE_CT_TYPE_SELECT_FUNC(ulong, unsigned long) DEFINE_CT_TYPE_SELECT_FUNC(int16, int16_t) + DEFINE_CT_TYPE_SELECT_FUNC(u64, u64) - +DEFINE_CT_TYPE_SELECT_FUNC(uchar, unsigned char) /* * Return NULL when OP_ENABLED=1 * otherwise, return W -@@ -174,5 +189,6 @@ sexp_null_cond (gcry_sexp_t w, unsigned +@@ -177,5 +192,6 @@ sexp_null_cond (gcry_sexp_t w, unsigned */ void _gcry_ct_memmov_cond (void *dst, const void *src, size_t len, unsigned long op_enable); +void _gcry_ct_memcpy (void *dst, const void *src, size_t len, size_t buffer_len); #endif /*GCRY_CONST_TIME_H*/ -Index: libgcrypt-1.11.1/cipher/rsa.c +Index: libgcrypt-1.12.0/cipher/rsa.c =================================================================== ---- libgcrypt-1.11.1.orig/cipher/rsa.c -+++ libgcrypt-1.11.1/cipher/rsa.c -@@ -1197,7 +1197,11 @@ secret_blinded (gcry_mpi_t output, gcry_ +--- libgcrypt-1.12.0.orig/cipher/rsa.c ++++ libgcrypt-1.12.0/cipher/rsa.c +@@ -1198,7 +1198,11 @@ secret_blinded (gcry_mpi_t output, gcry_ /* Undo blinding. Here we calculate: y = (x * r^-1) mod n, where x * is the blinded decrypted data, ri is the modular multiplicative * inverse of r and n is the RSA modulus. */ @@ -427,7 +427,7 @@ _gcry_mpi_release (r); _gcry_mpi_release (ri); -@@ -1432,6 +1436,7 @@ rsa_encrypt (gcry_sexp_t *r_ciph, gcry_s +@@ -1433,6 +1437,7 @@ rsa_encrypt (gcry_sexp_t *r_ciph, gcry_s } @@ -435,7 +435,7 @@ static gcry_err_code_t rsa_decrypt (gcry_sexp_t *r_plain, gcry_sexp_t s_data, gcry_sexp_t keyparms) -@@ -1447,6 +1452,9 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ +@@ -1448,6 +1453,9 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ unsigned int nbits = rsa_get_nbits (keyparms); gcry_sexp_t result = NULL; gcry_sexp_t dummy = NULL; @@ -445,7 +445,7 @@ rc = rsa_check_keysize (nbits); if (rc) -@@ -1494,6 +1502,71 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ +@@ -1495,6 +1503,71 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ mpi_normalize (data); mpi_fdiv_r (data, data, sk.n); @@ -517,7 +517,7 @@ /* Allocate MPI for the plaintext. */ plain = mpi_snew (nbits); -@@ -1524,10 +1597,26 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ +@@ -1525,10 +1598,26 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ switch (ctx.encoding) { case PUBKEY_ENC_PKCS1: @@ -544,7 +544,7 @@ *r_plain = sexp_null_cond (result, ct_is_not_zero (rc)); dummy = sexp_null_cond (result, ct_is_zero (rc)); sexp_release (dummy); -@@ -1541,7 +1630,11 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ +@@ -1542,7 +1631,11 @@ rsa_decrypt (gcry_sexp_t *r_plain, gcry_ plain, ctx.label, ctx.labellen); mpi_free (plain); plain = NULL; @@ -556,11 +556,11 @@ *r_plain = sexp_null_cond (result, ct_is_not_zero (rc)); dummy = sexp_null_cond (result, ct_is_zero (rc)); sexp_release (dummy); -Index: libgcrypt-1.11.1/configure.ac +Index: libgcrypt-1.12.0/configure.ac =================================================================== ---- libgcrypt-1.11.1.orig/configure.ac -+++ libgcrypt-1.11.1/configure.ac -@@ -582,6 +582,22 @@ AC_ARG_ENABLE(jent-support, +--- libgcrypt-1.12.0.orig/configure.ac ++++ libgcrypt-1.12.0/configure.ac +@@ -602,6 +602,22 @@ AC_ARG_ENABLE(jent-support, jentsupport=$enableval,jentsupport=yes) AC_MSG_RESULT($jentsupport) @@ -583,10 +583,10 @@ # Implementation of the --disable-padlock-support switch. AC_MSG_CHECKING([whether padlock support is requested]) AC_ARG_ENABLE(padlock-support, -Index: libgcrypt-1.11.1/mpi/Makefile.am +Index: libgcrypt-1.12.0/mpi/Makefile.am =================================================================== ---- libgcrypt-1.11.1.orig/mpi/Makefile.am -+++ libgcrypt-1.11.1/mpi/Makefile.am +--- libgcrypt-1.12.0.orig/mpi/Makefile.am ++++ libgcrypt-1.12.0/mpi/Makefile.am @@ -181,3 +181,7 @@ EXTRA_libmpi_la_SOURCES = \ asm-common-aarch64.h \ asm-common-amd64.h \ @@ -595,11 +595,11 @@ +if WITH_MARVIN_WORKAROUND +libmpi_la_SOURCES += mpi-mul-cs.c +endif -Index: libgcrypt-1.11.1/mpi/mpi-internal.h +Index: libgcrypt-1.12.0/mpi/mpi-internal.h =================================================================== ---- libgcrypt-1.11.1.orig/mpi/mpi-internal.h -+++ libgcrypt-1.11.1/mpi/mpi-internal.h -@@ -241,6 +241,12 @@ void _gcry_mpih_mul_karatsuba_case( mpi_ +--- libgcrypt-1.12.0.orig/mpi/mpi-internal.h ++++ libgcrypt-1.12.0/mpi/mpi-internal.h +@@ -238,6 +238,12 @@ void _gcry_mpih_mul_karatsuba_case( mpi_ mpi_ptr_t vp, mpi_size_t vsize, struct karatsuba_ctx *ctx ); @@ -612,10 +612,10 @@ /*-- mpih-mul_1.c (or xxx/cpu/ *.S) --*/ mpi_limb_t _gcry_mpih_mul_1( mpi_ptr_t res_ptr, mpi_ptr_t s1_ptr, -Index: libgcrypt-1.11.1/mpi/mpi-mul-cs.c +Index: libgcrypt-1.12.0/mpi/mpi-mul-cs.c =================================================================== --- /dev/null -+++ libgcrypt-1.11.1/mpi/mpi-mul-cs.c ++++ libgcrypt-1.12.0/mpi/mpi-mul-cs.c @@ -0,0 +1,263 @@ +/* Copyright (c) 2024, Hubert Kario, Red Hat + * Released under BSD 2-Clause License, see LICENSE for details @@ -880,10 +880,10 @@ + + memcpy (ret, &atmp[anum], sizeof(limb_t)*modnum); +} -Index: libgcrypt-1.11.1/mpi/mpi-mul.c +Index: libgcrypt-1.12.0/mpi/mpi-mul.c =================================================================== ---- libgcrypt-1.11.1.orig/mpi/mpi-mul.c -+++ libgcrypt-1.11.1/mpi/mpi-mul.c +--- libgcrypt-1.12.0.orig/mpi/mpi-mul.c ++++ libgcrypt-1.12.0/mpi/mpi-mul.c @@ -203,6 +203,133 @@ _gcry_mpi_mul (gcry_mpi_t w, gcry_mpi_t _gcry_mpi_free_limb_space (tmp_limb, tmp_limb_nlimbs); } @@ -1064,10 +1064,10 @@ + _gcry_mpi_reverse_sec (m); /* -- this might be still used by the calling function */ +} +#endif /* WITH_MARVIN_WORKAROUND */ -Index: libgcrypt-1.11.1/src/gcrypt-int.h +Index: libgcrypt-1.12.0/src/gcrypt-int.h =================================================================== ---- libgcrypt-1.11.1.orig/src/gcrypt-int.h -+++ libgcrypt-1.11.1/src/gcrypt-int.h +--- libgcrypt-1.12.0.orig/src/gcrypt-int.h ++++ libgcrypt-1.12.0/src/gcrypt-int.h @@ -470,6 +470,9 @@ void _gcry_mpi_subm (gcry_mpi_t w, gcry_ void _gcry_mpi_mul (gcry_mpi_t w, gcry_mpi_t u, gcry_mpi_t v); void _gcry_mpi_mul_ui (gcry_mpi_t w, gcry_mpi_t u, unsigned long v ); @@ -1088,24 +1088,24 @@ #define mpi_powm(w,b,e,m) _gcry_mpi_powm ( (w), (b), (e), (m) ) #define mpi_tdiv(q,r,a,m) _gcry_mpi_div ( (q), (r), (a), (m), 0) #define mpi_fdiv(q,r,a,m) _gcry_mpi_div ( (q), (r), (a), (m), -1) -Index: libgcrypt-1.11.1/src/const-time.c +Index: libgcrypt-1.12.0/src/const-time.c =================================================================== ---- libgcrypt-1.11.1.orig/src/const-time.c -+++ libgcrypt-1.11.1/src/const-time.c -@@ -77,8 +77,8 @@ _gcry_ct_memmov_cond (void *dst, const v +--- libgcrypt-1.12.0.orig/src/const-time.c ++++ libgcrypt-1.12.0/src/const-time.c +@@ -105,8 +105,8 @@ _gcry_ct_memmov_cond (void *dst, const v unsigned long op_enable) { /* Note: dual mask with AND/OR used for EM leakage mitigation */ -- unsigned char mask1 = ct_ulong_gen_mask(op_enable); -- unsigned char mask2 = ct_ulong_gen_inv_mask(op_enable); -+ volatile unsigned char mask1 = ct_ulong_gen_mask(op_enable); -+ volatile unsigned char mask2 = ct_ulong_gen_inv_mask(op_enable); +- u64 mask1 = ct_u64_gen_mask (op_enable); +- u64 mask2 = ct_u64_gen_inv_mask (op_enable); ++ volatile u64 mask1 = ct_u64_gen_mask (op_enable); ++ volatile u64 mask2 = ct_u64_gen_inv_mask (op_enable); unsigned char *b_dst = dst; const unsigned char *b_src = src; - size_t i; -@@ -86,3 +86,27 @@ _gcry_ct_memmov_cond (void *dst, const v - for (i = 0; i < len; i++) - b_dst[i] = (b_dst[i] & mask2) | (b_src[i] & mask1); + +@@ -130,3 +130,27 @@ _gcry_ct_memmov_cond (void *dst, const v + len--; + } } + +/* @@ -1131,10 +1131,10 @@ + b_dst[i] = (b_src[i] & mask_a) | (b_dst[i] & mask_b); + } +} -Index: libgcrypt-1.11.1/src/sexp.c +Index: libgcrypt-1.12.0/src/sexp.c =================================================================== ---- libgcrypt-1.11.1.orig/src/sexp.c -+++ libgcrypt-1.11.1/src/sexp.c +--- libgcrypt-1.12.0.orig/src/sexp.c ++++ libgcrypt-1.12.0/src/sexp.c @@ -31,6 +31,7 @@ #define GCRYPT_NO_MPI_MACROS 1 @@ -1215,10 +1215,10 @@ } else if (*p == 'd') { -Index: libgcrypt-1.11.1/cipher/pubkey-internal.h +Index: libgcrypt-1.12.0/cipher/pubkey-internal.h =================================================================== ---- libgcrypt-1.11.1.orig/cipher/pubkey-internal.h -+++ libgcrypt-1.11.1/cipher/pubkey-internal.h +--- libgcrypt-1.12.0.orig/cipher/pubkey-internal.h ++++ libgcrypt-1.12.0/cipher/pubkey-internal.h @@ -55,6 +55,14 @@ _gcry_rsa_pkcs1_encode_for_enc (gcry_mpi gpg_err_code_t _gcry_rsa_pkcs1_decode_for_enc (unsigned char **r_result, size_t *r_resultlen, @@ -1234,11 +1234,11 @@ gpg_err_code_t _gcry_rsa_pkcs1_encode_raw_for_sig (gcry_mpi_t *r_result, unsigned int nbits, const unsigned char *value, size_t valuelen); -Index: libgcrypt-1.11.1/cipher/pubkey-util.c +Index: libgcrypt-1.12.0/cipher/pubkey-util.c =================================================================== ---- libgcrypt-1.11.1.orig/cipher/pubkey-util.c -+++ libgcrypt-1.11.1/cipher/pubkey-util.c -@@ -193,6 +193,15 @@ _gcry_pk_util_parse_flaglist (gcry_sexp_ +--- libgcrypt-1.12.0.orig/cipher/pubkey-util.c ++++ libgcrypt-1.12.0/cipher/pubkey-util.c +@@ -195,6 +195,15 @@ _gcry_pk_util_parse_flaglist (gcry_sexp_ rc = GPG_ERR_INV_FLAG; break; @@ -1254,58 +1254,22 @@ default: if (!igninvflag) rc = GPG_ERR_INV_FLAG; -Index: libgcrypt-1.11.1/src/cipher.h +Index: libgcrypt-1.12.0/src/cipher.h =================================================================== ---- libgcrypt-1.11.1.orig/src/cipher.h -+++ libgcrypt-1.11.1/src/cipher.h -@@ -26,24 +26,25 @@ - - #include "../random/random.h" - --#define PUBKEY_FLAG_NO_BLINDING (1 << 0) --#define PUBKEY_FLAG_RFC6979 (1 << 1) --#define PUBKEY_FLAG_FIXEDLEN (1 << 2) --#define PUBKEY_FLAG_LEGACYRESULT (1 << 3) --#define PUBKEY_FLAG_RAW_FLAG (1 << 4) --#define PUBKEY_FLAG_TRANSIENT_KEY (1 << 5) --#define PUBKEY_FLAG_USE_X931 (1 << 6) --#define PUBKEY_FLAG_USE_FIPS186 (1 << 7) --#define PUBKEY_FLAG_USE_FIPS186_2 (1 << 8) --#define PUBKEY_FLAG_PARAM (1 << 9) --#define PUBKEY_FLAG_COMP (1 << 10) --#define PUBKEY_FLAG_NOCOMP (1 << 11) --#define PUBKEY_FLAG_EDDSA (1 << 12) --#define PUBKEY_FLAG_GOST (1 << 13) --#define PUBKEY_FLAG_NO_KEYTEST (1 << 14) --#define PUBKEY_FLAG_DJB_TWEAK (1 << 15) --#define PUBKEY_FLAG_SM2 (1 << 16) --#define PUBKEY_FLAG_PREHASH (1 << 17) -+#define PUBKEY_FLAG_NO_BLINDING (1 << 0) -+#define PUBKEY_FLAG_RFC6979 (1 << 1) -+#define PUBKEY_FLAG_FIXEDLEN (1 << 2) -+#define PUBKEY_FLAG_LEGACYRESULT (1 << 3) -+#define PUBKEY_FLAG_RAW_FLAG (1 << 4) -+#define PUBKEY_FLAG_TRANSIENT_KEY (1 << 5) -+#define PUBKEY_FLAG_USE_X931 (1 << 6) -+#define PUBKEY_FLAG_USE_FIPS186 (1 << 7) -+#define PUBKEY_FLAG_USE_FIPS186_2 (1 << 8) -+#define PUBKEY_FLAG_PARAM (1 << 9) -+#define PUBKEY_FLAG_COMP (1 << 10) -+#define PUBKEY_FLAG_NOCOMP (1 << 11) -+#define PUBKEY_FLAG_EDDSA (1 << 12) -+#define PUBKEY_FLAG_GOST (1 << 13) -+#define PUBKEY_FLAG_NO_KEYTEST (1 << 14) -+#define PUBKEY_FLAG_DJB_TWEAK (1 << 15) -+#define PUBKEY_FLAG_SM2 (1 << 16) -+#define PUBKEY_FLAG_PREHASH (1 << 17) -+#define PUBKEY_FLAG_NO_IMPLICIT_REJECTION (1 << 18) - - - enum pk_operation -Index: libgcrypt-1.11.1/tests/pkcs1v2-v15c.h +--- libgcrypt-1.12.0.orig/src/cipher.h ++++ libgcrypt-1.12.0/src/cipher.h +@@ -46,6 +46,7 @@ + #define PUBKEY_FLAG_PREHASH (1 << 17) + #define PUBKEY_FLAG_BYTE_STRING (1 << 18) + #define PUBKEY_FLAG_NO_PREFIX (1 << 19) ++#define PUBKEY_FLAG_NO_IMPLICIT_REJECTION (1 << 20) + /* + * The internal flag to select least leak implementation for ECC. + * It needs to be a distinct value not covered by PUBKEY_* above. +Index: libgcrypt-1.12.0/tests/pkcs1v2-v15c.h =================================================================== ---- libgcrypt-1.11.1.orig/tests/pkcs1v2-v15c.h -+++ libgcrypt-1.11.1/tests/pkcs1v2-v15c.h +--- libgcrypt-1.12.0.orig/tests/pkcs1v2-v15c.h ++++ libgcrypt-1.12.0/tests/pkcs1v2-v15c.h @@ -21,6 +21,7 @@ const char *mesg; const char *seed; @@ -1623,10 +1587,10 @@ + } } }; -Index: libgcrypt-1.11.1/tests/pkcs1v2.c +Index: libgcrypt-1.12.0/tests/pkcs1v2.c =================================================================== ---- libgcrypt-1.11.1.orig/tests/pkcs1v2.c -+++ libgcrypt-1.11.1/tests/pkcs1v2.c +--- libgcrypt-1.12.0.orig/tests/pkcs1v2.c ++++ libgcrypt-1.12.0/tests/pkcs1v2.c @@ -82,7 +82,7 @@ data_from_hex (const char *string, size_ static int ++++++ libgcrypt-FIPS-SLI-hash-mac.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.643149943 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.647150109 +0100 @@ -1,8 +1,8 @@ -Index: libgcrypt-1.11.1/doc/gcrypt.texi +Index: libgcrypt-1.12.0/doc/gcrypt.texi =================================================================== ---- libgcrypt-1.11.1.orig/doc/gcrypt.texi -+++ libgcrypt-1.11.1/doc/gcrypt.texi -@@ -998,13 +998,21 @@ certification. If the function is approv +--- libgcrypt-1.12.0.orig/doc/gcrypt.texi ++++ libgcrypt-1.12.0/doc/gcrypt.texi +@@ -1007,13 +1007,21 @@ certification. If the function is approv @code{GPG_ERR_NO_ERROR} (other restrictions might still apply). Otherwise @code{GPG_ERR_NOT_SUPPORTED} is returned. @@ -28,11 +28,11 @@ @item GCRYCTL_FIPS_SERVICE_INDICATOR_MD; Arguments: enum gcry_md_algos Check if the given message digest algorithm is approved under the current -Index: libgcrypt-1.11.1/src/fips.c +Index: libgcrypt-1.12.0/src/fips.c =================================================================== ---- libgcrypt-1.11.1.orig/src/fips.c -+++ libgcrypt-1.11.1/src/fips.c -@@ -512,31 +512,6 @@ _gcry_fips_indicator_pk (va_list arg_ptr +--- libgcrypt-1.12.0.orig/src/fips.c ++++ libgcrypt-1.12.0/src/fips.c +@@ -538,31 +538,6 @@ _gcry_fips_indicator_pk (va_list arg_ptr } int @@ -64,7 +64,7 @@ _gcry_fips_indicator_md (va_list arg_ptr) { enum gcry_md_algos alg = va_arg (arg_ptr, enum gcry_md_algos); -@@ -647,6 +622,62 @@ _gcry_fips_indicator_pk_flags (va_list a +@@ -673,6 +648,62 @@ _gcry_fips_indicator_pk_flags (va_list a return GPG_ERR_NOT_SUPPORTED; } @@ -127,11 +127,11 @@ /* This is a test on whether the library is in the error or operational state. */ -Index: libgcrypt-1.11.1/src/g10lib.h +Index: libgcrypt-1.12.0/src/g10lib.h =================================================================== ---- libgcrypt-1.11.1.orig/src/g10lib.h -+++ libgcrypt-1.11.1/src/g10lib.h -@@ -478,6 +478,7 @@ void _gcry_fips_signal_error (const char +--- libgcrypt-1.12.0.orig/src/g10lib.h ++++ libgcrypt-1.12.0/src/g10lib.h +@@ -485,6 +485,7 @@ void _gcry_fips_signal_error (const char gpg_err_code_t _gcry_fips_indicator (void); int _gcry_fips_indicator_cipher (va_list arg_ptr); @@ -139,11 +139,11 @@ int _gcry_fips_indicator_mac (va_list arg_ptr); int _gcry_fips_indicator_md (va_list arg_ptr); int _gcry_fips_indicator_kdf (va_list arg_ptr); -Index: libgcrypt-1.11.1/src/gcrypt.h.in +Index: libgcrypt-1.12.0/src/gcrypt.h.in =================================================================== ---- libgcrypt-1.11.1.orig/src/gcrypt.h.in -+++ libgcrypt-1.11.1/src/gcrypt.h.in -@@ -338,7 +338,8 @@ enum gcry_ctl_cmds +--- libgcrypt-1.12.0.orig/src/gcrypt.h.in ++++ libgcrypt-1.12.0/src/gcrypt.h.in +@@ -345,7 +345,8 @@ enum gcry_ctl_cmds GCRYCTL_MD_CUSTOMIZE = 88, GCRYCTL_FIPS_SERVICE_INDICATOR = 89, GCRYCTL_FIPS_REJECT_NON_FIPS = 90, @@ -153,10 +153,10 @@ }; /* Perform various operations defined by CMD. */ -Index: libgcrypt-1.11.1/src/global.c +Index: libgcrypt-1.12.0/src/global.c =================================================================== ---- libgcrypt-1.11.1.orig/src/global.c -+++ libgcrypt-1.11.1/src/global.c +--- libgcrypt-1.12.0.orig/src/global.c ++++ libgcrypt-1.12.0/src/global.c @@ -808,6 +808,12 @@ _gcry_vcontrol (enum gcry_ctl_cmds cmd, rc = _gcry_fips_indicator_cipher (arg_ptr); break; ++++++ libgcrypt-FIPS-SLI-kdf-leylength.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.715152932 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.731153596 +0100 @@ -1,8 +1,8 @@ -Index: libgcrypt-1.11.0/src/fips.c +Index: libgcrypt-1.12.0/src/fips.c =================================================================== ---- libgcrypt-1.11.0.orig/src/fips.c -+++ libgcrypt-1.11.0/src/fips.c -@@ -523,10 +523,15 @@ int +--- libgcrypt-1.12.0.orig/src/fips.c ++++ libgcrypt-1.12.0/src/fips.c +@@ -594,10 +594,15 @@ int _gcry_fips_indicator_kdf (va_list arg_ptr) { enum gcry_kdf_algos alg = va_arg (arg_ptr, enum gcry_kdf_algos); @@ -18,11 +18,11 @@ return GPG_ERR_NO_ERROR; default: return GPG_ERR_NOT_SUPPORTED; -Index: libgcrypt-1.11.0/doc/gcrypt.texi +Index: libgcrypt-1.12.0/doc/gcrypt.texi =================================================================== ---- libgcrypt-1.11.0.orig/doc/gcrypt.texi -+++ libgcrypt-1.11.0/doc/gcrypt.texi -@@ -983,12 +983,13 @@ is approved under the current FIPS 140-3 +--- libgcrypt-1.12.0.orig/doc/gcrypt.texi ++++ libgcrypt-1.12.0/doc/gcrypt.texi +@@ -992,12 +992,13 @@ is approved under the current FIPS 140-3 combination is approved, this function returns @code{GPG_ERR_NO_ERROR}. Otherwise @code{GPG_ERR_NOT_SUPPORTED} is returned. @@ -40,10 +40,10 @@ @item GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION; Arguments: const char * -Index: libgcrypt-1.11.0/tests/t-kdf.c +Index: libgcrypt-1.12.0/tests/t-kdf.c =================================================================== ---- libgcrypt-1.11.0.orig/tests/t-kdf.c -+++ libgcrypt-1.11.0/tests/t-kdf.c +--- libgcrypt-1.12.0.orig/tests/t-kdf.c ++++ libgcrypt-1.12.0/tests/t-kdf.c @@ -1889,7 +1889,12 @@ check_fips_indicators (void) for (i = 0; i < sizeof(kdf_algos) / sizeof(*kdf_algos); i++) { ++++++ libgcrypt-FIPS-SLI-pk.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.751154427 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.755154592 +0100 @@ -1,8 +1,8 @@ -Index: libgcrypt-1.11.1/src/fips.c +Index: libgcrypt-1.12.0/src/fips.c =================================================================== ---- libgcrypt-1.11.1.orig/src/fips.c -+++ libgcrypt-1.11.1/src/fips.c -@@ -38,6 +38,7 @@ +--- libgcrypt-1.12.0.orig/src/fips.c ++++ libgcrypt-1.12.0/src/fips.c +@@ -40,6 +40,7 @@ #include "g10lib.h" #include "cipher-proto.h" @@ -10,7 +10,7 @@ #include "../random/random.h" /* The states of the finite state machine used in fips mode. */ -@@ -420,6 +421,94 @@ _gcry_fips_indicator_cipher (va_list arg +@@ -446,6 +447,94 @@ _gcry_fips_indicator_cipher (va_list arg default: return GPG_ERR_NOT_SUPPORTED; } @@ -105,11 +105,11 @@ } int -Index: libgcrypt-1.11.1/src/gcrypt.h.in +Index: libgcrypt-1.12.0/src/gcrypt.h.in =================================================================== ---- libgcrypt-1.11.1.orig/src/gcrypt.h.in -+++ libgcrypt-1.11.1/src/gcrypt.h.in -@@ -337,7 +337,8 @@ enum gcry_ctl_cmds +--- libgcrypt-1.12.0.orig/src/gcrypt.h.in ++++ libgcrypt-1.12.0/src/gcrypt.h.in +@@ -344,7 +344,8 @@ enum gcry_ctl_cmds GCRYCTL_FIPS_SERVICE_INDICATOR_PK_FLAGS = 87, GCRYCTL_MD_CUSTOMIZE = 88, GCRYCTL_FIPS_SERVICE_INDICATOR = 89, @@ -119,11 +119,11 @@ }; /* Perform various operations defined by CMD. */ -Index: libgcrypt-1.11.1/doc/gcrypt.texi +Index: libgcrypt-1.12.0/doc/gcrypt.texi =================================================================== ---- libgcrypt-1.11.1.orig/doc/gcrypt.texi -+++ libgcrypt-1.11.1/doc/gcrypt.texi -@@ -1010,6 +1010,19 @@ Check if the given message digest algori +--- libgcrypt-1.12.0.orig/doc/gcrypt.texi ++++ libgcrypt-1.12.0/doc/gcrypt.texi +@@ -1019,6 +1019,19 @@ Check if the given message digest algori FIPS 140-3 certification. If the algorithm is approved, this function returns @code{GPG_ERR_NO_ERROR}. Otherwise @code{GPG_ERR_NOT_SUPPORTED} is returned. @@ -143,11 +143,11 @@ @item GCRYCTL_FIPS_SERVICE_INDICATOR_PK_FLAGS; Arguments: const char * Check if the given public key operation flag or s-expression object name is -Index: libgcrypt-1.11.1/src/g10lib.h +Index: libgcrypt-1.12.0/src/g10lib.h =================================================================== ---- libgcrypt-1.11.1.orig/src/g10lib.h -+++ libgcrypt-1.11.1/src/g10lib.h -@@ -482,6 +482,7 @@ int _gcry_fips_indicator_mac (va_list ar +--- libgcrypt-1.12.0.orig/src/g10lib.h ++++ libgcrypt-1.12.0/src/g10lib.h +@@ -489,6 +489,7 @@ int _gcry_fips_indicator_mac (va_list ar int _gcry_fips_indicator_md (va_list arg_ptr); int _gcry_fips_indicator_kdf (va_list arg_ptr); int _gcry_fips_indicator_function (va_list arg_ptr); @@ -155,10 +155,10 @@ int _gcry_fips_indicator_pk_flags (va_list arg_ptr); int _gcry_fips_is_operational (void); -Index: libgcrypt-1.11.1/src/global.c +Index: libgcrypt-1.12.0/src/global.c =================================================================== ---- libgcrypt-1.11.1.orig/src/global.c -+++ libgcrypt-1.11.1/src/global.c +--- libgcrypt-1.12.0.orig/src/global.c ++++ libgcrypt-1.12.0/src/global.c @@ -842,6 +842,15 @@ _gcry_vcontrol (enum gcry_ctl_cmds cmd, rc = _gcry_fips_indicator_pk_flags (arg_ptr); break; ++++++ libgcrypt-FIPS-jitter-standalone.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.771155257 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.775155423 +0100 @@ -1,7 +1,7 @@ -Index: libgcrypt-1.11.1/random/Makefile.am +Index: libgcrypt-1.12.0/random/Makefile.am =================================================================== ---- libgcrypt-1.11.1.orig/random/Makefile.am -+++ libgcrypt-1.11.1/random/Makefile.am +--- libgcrypt-1.12.0.orig/random/Makefile.am ++++ libgcrypt-1.12.0/random/Makefile.am @@ -21,7 +21,7 @@ # Need to include ../src in addition to top_srcdir because gcrypt.h is # a built header. @@ -50,10 +50,10 @@ - $(srcdir)/jitterentropy-base.c $(srcdir)/jitterentropy.h +rndjent.lo: $(srcdir)/rndjent.c `echo $(LTCOMPILE) -c $(srcdir)/rndjent.c | $(o_flag_munging) ` -Index: libgcrypt-1.11.1/random/rndjent.c +Index: libgcrypt-1.12.0/random/rndjent.c =================================================================== ---- libgcrypt-1.11.1.orig/random/rndjent.c -+++ libgcrypt-1.11.1/random/rndjent.c +--- libgcrypt-1.12.0.orig/random/rndjent.c ++++ libgcrypt-1.12.0/random/rndjent.c @@ -94,17 +94,12 @@ * jitterentropy-user-base.h file. */ @@ -74,10 +74,10 @@ /* This is the lock we use to serialize access to this RNG. The extra * integer variable is only used to check the locking state; that is, -Index: libgcrypt-1.11.1/random/Makefile.in +Index: libgcrypt-1.12.0/random/Makefile.in =================================================================== ---- libgcrypt-1.11.1.orig/random/Makefile.in -+++ libgcrypt-1.11.1/random/Makefile.in +--- libgcrypt-1.12.0.orig/random/Makefile.in ++++ libgcrypt-1.12.0/random/Makefile.in @@ -147,12 +147,7 @@ am__v_at_1 = DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir) depcomp = $(SHELL) $(top_srcdir)/build-aux/depcomp @@ -92,7 +92,7 @@ ./$(DEPDIR)/random-csprng.Plo ./$(DEPDIR)/random-drbg.Plo \ ./$(DEPDIR)/random-system.Plo ./$(DEPDIR)/random.Plo \ ./$(DEPDIR)/rndegd.Plo ./$(DEPDIR)/rndgetentropy.Plo \ -@@ -375,7 +370,7 @@ top_srcdir = @top_srcdir@ +@@ -379,7 +374,7 @@ top_srcdir = @top_srcdir@ # Need to include ../src in addition to top_srcdir because gcrypt.h is # a built header. AM_CPPFLAGS = -I../src -I$(top_srcdir)/src @@ -101,7 +101,7 @@ noinst_LTLIBRARIES = librandom.la GCRYPT_MODULES = @GCRYPT_RANDOM@ librandom_la_DEPENDENCIES = $(GCRYPT_MODULES) -@@ -394,14 +389,7 @@ rndgetentropy.c \ +@@ -398,14 +393,7 @@ rndgetentropy.c \ rndoldlinux.c \ rndegd.c \ rndunix.c \ @@ -117,7 +117,7 @@ @ENABLE_O_FLAG_MUNGING_FALSE@o_flag_munging = cat -@@ -461,12 +449,6 @@ mostlyclean-compile: +@@ -465,12 +453,6 @@ mostlyclean-compile: distclean-compile: -rm -f *.tab.c @@ -130,7 +130,7 @@ @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/random-csprng.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/random-drbg.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/random-system.Plo@am__quote@ # am--include-marker -@@ -636,12 +618,6 @@ clean-am: clean-generic clean-libtool cl +@@ -640,12 +622,6 @@ clean-am: clean-generic clean-libtool cl mostlyclean-am distclean: distclean-am @@ -143,7 +143,7 @@ -rm -f ./$(DEPDIR)/random-csprng.Plo -rm -f ./$(DEPDIR)/random-drbg.Plo -rm -f ./$(DEPDIR)/random-system.Plo -@@ -698,12 +674,6 @@ install-ps-am: +@@ -702,12 +678,6 @@ install-ps-am: installcheck-am: maintainer-clean: maintainer-clean-am @@ -156,7 +156,7 @@ -rm -f ./$(DEPDIR)/random-csprng.Plo -rm -f ./$(DEPDIR)/random-drbg.Plo -rm -f ./$(DEPDIR)/random-system.Plo -@@ -752,22 +722,10 @@ uninstall-am: +@@ -756,22 +726,10 @@ uninstall-am: .PRECIOUS: Makefile ++++++ libgcrypt-FIPS-rndjent_poll.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.791156087 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.795156253 +0100 @@ -1,7 +1,7 @@ -Index: libgcrypt-1.10.0/random/rndoldlinux.c +Index: libgcrypt-1.12.0/random/rndoldlinux.c =================================================================== ---- libgcrypt-1.10.0.orig/random/rndoldlinux.c -+++ libgcrypt-1.10.0/random/rndoldlinux.c +--- libgcrypt-1.12.0.orig/random/rndoldlinux.c ++++ libgcrypt-1.12.0/random/rndoldlinux.c @@ -132,7 +132,7 @@ _gcry_rndoldlinux_gather_random (void (* volatile pid_t apid; int fd; @@ -80,36 +80,35 @@ _gcry_pre_syscall (); ret = getentropy (buffer, nbytes); _gcry_post_syscall (); -Index: libgcrypt-1.10.0/random/rndjent.c +Index: libgcrypt-1.12.0/random/rndjent.c =================================================================== ---- libgcrypt-1.10.0.orig/random/rndjent.c -+++ libgcrypt-1.10.0/random/rndjent.c -@@ -279,13 +279,24 @@ _gcry_rndjent_poll (void (*add)(const vo - if (!jent_rng_is_initialized) - { - /* Auto-initialize. */ -- jent_rng_is_initialized = 1; - jent_entropy_collector_free (jent_rng_collector); +--- libgcrypt-1.12.0.orig/random/rndjent.c ++++ libgcrypt-1.12.0/random/rndjent.c +@@ -294,15 +294,23 @@ _gcry_rndjent_poll (void (*add)(const vo jent_rng_collector = NULL; if ( !(_gcry_random_read_conf () & RANDOM_CONF_DISABLE_JENT)) { - if (!jent_entropy_init ()) -- jent_rng_collector = jent_entropy_collector_alloc (1, 0); -+ if (!jent_entropy_init_ex (1, 0)) -+ { -+ jent_rng_collector = jent_entropy_collector_alloc (1, 0); ++ if (!jent_entropy_init_ex (1, 0)) + { + jent_rng_collector = jent_entropy_collector_alloc (1, 0); +- if (jent_rng_collector != NULL) +- jent_rng_is_initialized = 1; + jent_rng_is_initialized = 1; -+ } -+ } -+ } -+ + } + } + } + + if (!jent_rng_collector) + { + if (!jent_entropy_init_ex (1, 0)) + { -+ jent_rng_collector = jent_entropy_collector_alloc (1, 0); -+ jent_rng_is_initialized = 1; - } - } - ++ jent_rng_collector = jent_entropy_collector_alloc (1, 0); ++ jent_rng_is_initialized = 1; ++ } ++ } ++ + if (jent_rng_collector && add) + { + /* We have a working JENT and it has not been disabled. */ ++++++ libgcrypt-nobetasuffix.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.811156918 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.823157415 +0100 @@ -1,17 +1,17 @@ -Index: libgcrypt-1.10.2/autogen.sh +Index: libgcrypt-1.12.0/autogen.sh =================================================================== ---- libgcrypt-1.10.2.orig/autogen.sh -+++ libgcrypt-1.10.2/autogen.sh -@@ -249,7 +249,7 @@ if [ "$myhost" = "find-version" ]; then - fi +--- libgcrypt-1.12.0.orig/autogen.sh ++++ libgcrypt-1.12.0/autogen.sh +@@ -259,7 +259,7 @@ if [ "$myhost" = "find-version" ]; then + matchexcl="--exclude $package-*beta*" beta=no - if [ -e .git ]; then + if false; then ingit=yes - tmp=$(git describe --match "${matchstr1}" --long 2>/dev/null) - tmp=$(echo "$tmp" | sed s/^"$package"//) -@@ -265,8 +265,8 @@ if [ "$myhost" = "find-version" ]; then + tmp=$(git describe --match "${matchstr1}" $matchexcl --long 2>/dev/null) + if [ -n "$tmp" ]; then +@@ -285,8 +285,8 @@ if [ "$myhost" = "find-version" ]; then rvd=$((0x$(echo ${rev} | dd bs=1 count=4 2>/dev/null))) else ingit=no @@ -19,7 +19,7 @@ - tmp="-unknown" + beta=no + tmp="" + cid="0000000" rev="0000000" rvd="0" - fi ++++++ libgcrypt-rol64-redefinition.patch ++++++ --- /var/tmp/diff_new_pack.g2ti9m/_old 2026-02-24 15:38:53.851158578 +0100 +++ /var/tmp/diff_new_pack.g2ti9m/_new 2026-02-24 15:38:53.855158744 +0100 @@ -1,8 +1,8 @@ -Index: libgcrypt-1.11.0/cipher/bithelp.h +Index: libgcrypt-1.12.0/cipher/bithelp.h =================================================================== ---- libgcrypt-1.11.0.orig/cipher/bithelp.h -+++ libgcrypt-1.11.0/cipher/bithelp.h -@@ -35,11 +35,6 @@ static inline u32 ror(u32 x, int n) +--- libgcrypt-1.12.0.orig/cipher/bithelp.h ++++ libgcrypt-1.12.0/cipher/bithelp.h +@@ -36,11 +36,6 @@ static inline u32 ror(u32 x, int n) return ( (x >> (n&(32-1))) | (x << ((32-n)&(32-1))) ); }
