Crypto++ 8.7

Crypto++ 8.7 was released on August 7, 2022. The 8.7 release was a minor, planned release. There were no CVEs and one memory error fixed.

Download

The download is available from the Crypto++ website. The checksums for the download are below. Release signatures can be verified using GnuPG according to Release Signing.

• Download: cryptopp870.zip, cryptopp870.zip.sig
• SHA1: c7e94a1d9e0b8a0591777afb23fc5319e3ed222e
• SHA256: d0d3a28fcb5a1f6ed66b3adf57ecfaed234a7e194e42be465c2ba70c744538dd
• SHA512: cb85e10118b247be016b40ecf79cf3ff933a174e2e3d9280c426e57eb1ad936db42eafc19a30ec9bf5d7f08c335b1fee4dc149e1bda00d44d40d84d010f6af11
• BLAKE2b: 2d85356e4f6e7885a672177018945681577b0a657910a6d75344031e4a178be185ce84849294e95c75e5682000ec8c33cc58ed9202dc332ebedd6a214167592d
• WHIRLPOOL: ecdef113566d3859b15ab1468d4a9d91d8bd02f386063bf095581562ac15d86db228a6643f4465810329fb58e2236be7e13547192a499cf996d4bf29e9b9d84d

Mirrors for the download are below. Note that GitHub checksums on the ZIP or TAR are different because the service creates the archive from sources.

• GitHub cryptopp870.zip

Release Notes

The release notes for Crypto++ 8.7 follows.

• minor release, recompile of programs required
• expanded community input and support
• • 81 unique contributors as of this release
• fix RSA key generation for small moduli
• fix AES-GCM with AESNI but without CLMUL
• fix Clang warning with C++17
• fix MinGW builds due to use of O_NOFOLLOW
• rework CFB_CipherTemplate::ProcessData and AdditiveCipherTemplate::ProcessData
• • restored performance and avoided performance penalty of a temp buffer
• fix undersized SecBlock buffer in Integer bit operations
• work around several GCC 11 & 12 problems

Bug fixes and Minor Issues

• fix RSA key generation for small moduli (GH #1136)
• work around GCC 12 bad code generation for ECGDSA-RIPEMD (GH #1134)
• fix AES-GCM with AESNI but without CLMUL (GH #1132)
• work around GCC 9 bad code generation for POWER8 (GH #1115)
• fix Clang warning with C++17 (GH #1114)
• work around GCC 9 bad code generation for POWER8 (GH #1112)
• fix MinGW builds due to use of O_NOFOLLOW (GH #1109)
• rework CFB_CipherTemplate::ProcessData and AdditiveCipherTemplate::ProcessData (GH #1088, GH #1103)
• • restored performance and avoided performance penalty of a temp buffer
• use arc4random_buf for non-blocking generator on FreeBSD (GH #1098)
• work around Microsoft ARM64 bug with SHA-1 (GH #1096)
• work around GCC 11 bug on armhf (GH #1094)
• fix undersized SecBlock buffer in Integer bit operations (GH #1072)

GCC 12 crash

We removed GCC 12 from the supported compilers list. We believe it has a bug that is causing the validation suite to crash. See Issue 1134, Issue 1141 and GCC Issue 106568 for some of the discussion.

The crash is present with GCC 12 at -O2 or higher, and happens around the ECGDSA test suite. The crash is not present in GCC 12 at -O1 or -Os. The crash is not present in other compilers like Clang and MSVC. The crash was not present in earlier versions of GCC. Tools like Asan, UBsan and Valgirnd do not show a problem. -DCRYPTOPP_DISABLE_ASM and -fno-lto do not affect the problem.

We do not have a minimal reproducer, so tracking down the crash is problematic. We also cannot report it to the GCC folks without a reproducer.

The current workaround is to build the library at -O1 or -Os.

FIPS DLL deprecation

The FIPS DLL used to be an important artifact for Windows builds. NIST moved the Crypto++ library to the Historical Validation List in 2014. The Windows DLL is no longer validated.

The project files to build the FIPS DLL are cryptdll.vcxproj and dlltest.vcxproj. The projects are now deprecated and subject to removal.

File Changes

Below is a list of all files that were created or renamed at Crypto++ 8.7.

$ git diff-tree -r --summary CRYPTOPP_8_6_0 CRYPTOPP_8_7_0 | grep -v "change" | awk '{$2=$3=""; print $0}' | grep -E '(\.h|\.cpp|\.txt|\.dat)'
create   TestPrograms/test_arm_armv7.cpp
create   power7_ppc.cpp
create   power8_ppc.cpp
create   power9_ppc.cpp
delete   ppc_power7.cpp
delete   ppc_power8.cpp
delete   ppc_power9.cpp