| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: Botan-doc | Distribution: openSUSE Tumbleweed |
| Version: 3.13.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Aug 31 11:10:36 2026 |
| Group: Development/Libraries/C and C++ | Build host: reproducible |
| Size: 1261325 | Source RPM: Botan-3.13.0-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://botan.randombit.net | |
| Summary: Documentation of Botan | |
Documentation of Botan package.
BSD-2-Clause
* Mon Aug 31 2026 Angel Yankov <angel.yankov@suse.com>
- Update to 3.13.0:
* Fix a blind SSRF during OCSP request processing. A malicious OCSP responder or network attacker could cause the application to perform a blind GET to an internal service. (GH #5815)
* Fix a bug in AutoSeeded_RNG, affecting only platforms without a system RNG, where an API sequence of calling first clear, followed by randomize writing to an empty buffer, resulted in the RNG object being considered seeded even though it was not. (GH #5839 #5838)
* Fix an integer overflow in Scrypt parameter handling, affecting 32-bit platforms. (GH #5820 #5629)
* Fix a bug where certain DN name constraints were not correctly enforced.
* Fix an integer overflow in the FFI interface which might be exploitable in unusual scenarios involving attacker-control cipher specifiers and the raw block cipher (ECB) APIs. (GH #5805)
* Add URI and email name constraint processing to X509 path validation (GH #5598)
* Add DNSName, URI, and EmailAddress types. (GH #5598 #5601 #5622 #5663 #5683 #5750)
* The default policy for TLS now no longer lists finite field Diffie-Hellman. If required for compatibility it must be enabled by the application. (GH #5782)
* By default OCSP no longer accepts soft-fail conditions such as network failure. (GH #5785 #5804)
* DTLS 1.2 servers now must either set a DTLS cookie secret and provide the peer network identity, or explicitly opt out of the cookie exchange by overriding dtls_server_require_cookie_exchange to return false. (GH #5792)
* Fix DTLS 1.2 handshake edge cases, including pacing of repeated timeout checks, replay of final flights after local activation, partial server-flight delivery, and delayed server-side flight handling. (GH #2310 #2498 #4022 #4036 #5696 #5790 #5791 #5792 #5793 #5800 #5801 #5802 #5803 #5811 #5829 #5834 #5835 #5836)
* Add support for SPAKE2+ from RFC 9383 (GH #5711)
* Add support for PKCS #12 (GH #5478 #5625)
* Add support for GCM-SIV from RFC 8452 (GH #5770)
* Add support for the RFC 9608 No Revocation Available extension (GH #5595)
* Add support for encoding name constraint extensions (GH #5734)
* Add X509_DN::parse and improve the parsing and printing of Distinguished Name strings, including capturing RDN groupings and escaping control characters (GH #5618 #5657 #5658)
* Optimize X509_DN comparison and name constraint checks using precomputed canonical encodings (GH #5652)
* During path validation, by default require that OCSP responses are no more than seven days old. Previously any age was accepted as long as it preceded the response’s nextUpdate. (GH #5623)
* Improve OCSP request and response serialization (GH #5678 #5741)
* Improve handling of the authority and subject key identifier extensions (GH #5735 #5737)
* Properly decode and handle the X509 CRL Distribution Point and Authority Information Access extensions (GH #5712)
* Upgrade to TLS-Anvil 1.5 (GH #5630)
* Mon Jun 29 2026 Angel Yankov <angel.yankov@suse.com>
- Update to 3.12.0:
* CVE-2026-44378: Resolve a CPU based denial of service when decoding BER encoded data.
* Optimize and improve certificate store search operations (GH #5510)
* Require strict DER when decoding PKIX types such as certificates (#5521)
* Discard TLS handshake state once the handshake has completed, retaining only the data needed for the active connection (GH #5517)
* Various TLS conformance, hardening, and performance fixes. (GH #5550 #5551 #5568 #5555)
* Various X509/PKIX/OCSP optimizations and bug fixes (GH #5535 #5536 #5546 #5554 #5561 #5562 #5569)
* Skip OCSP/CRL revocation checks on certificate chains which were already going to be rejected due to path validation errors (GH #5512)
* Add BER_Decoder::Limits which allows controlling what DER/BER syntax is accepted while decoding. (GH #5507 #5514)
* Add support for IPv6 name constraints in X.509 certificate path validation, and add IPv6 address parsing and formatting utilities (GH #5534 #5537)
* Refactor the Windows system certificate store and add a cache of materialized certificates to avoid repeated parsing. (GH #5539)
* Improve handling of unknown X.509 certificate extensions (GH #5518)
* Skip checking the self-signature of self-signed certificates during parsing (GH #5515)
* Add an index to X509_CRL for fast revocation checks (GH #5511)
* Add X509_Certificate::Tag for fast searching/indexing of certificates (GH #5509)
* Change X509_Object to share immutable state between copies (GH #5504)
* Fix bugs in handling of indefinite length BER data, including missing EOC markers being silently accepted (GH #5545)
* Make certificate path building DFS incremental (GH #5513 #5520 #5521)
* Avoid sending the TLS certificate_type extension unless TLS 1.2 is disabled, since raw public keys are not currently supported in 1.2 (GH #5523)
* Add support for RFC 9258 PSK import in TLS 1.3 (GH #5523)
* Avoid truncation of large handshake messages in DTLS (GH #5522)
* Add ALPN support to the Boost ASIO TLS stream (GH #5428)
* Upgrade TLS-Anvil and add client-side TLS-Anvil testing (GH #5503)
* Upgrade BoGo tests (GH #5523 #5556)
* Add a script for running the NIST ACVP test vectors (GH #5527)
* Add BigInt::signum to simplify sign comparisons (GH #5519)
* Fixes for compiling with GCC 16 (GH #5564)
* Add DRBG helpers to the C89/FFI interface and Python binding (GH #5527)
* Add EC scalar and point operations to the C89/FFI interface (GH #5404 #5565)
* Add NIST key wrap with padding to the Python binding (GH #5521)
* Enforce maximum input length limits for ChaCha20Poly1305 and GHASH/GCM (GH #5521)
* Add configure.py --without-include-namespace to allow installing headers without the botan-3/ subdirectory (GH #5528)
* Tue Apr 14 2026 Angel Yankov <angel.yankov@suse.com>
- Update to 3.11.1
* CVE-2026-35580: Resolve certificate verification bypass bug introduced in 3.11.0 (GH #5500)
* CVE-2026-35582: Resolve TLS 1.3 client authentication bypass (GH #5599)
* Add optimized Argon2 implementation using AVX512 (GH #5471)
* Add optimized and constant-time Twofish implementation using AVX512/GFNI (GH #5465)
* Add optimized and constant-time SEED implementation using AVX512/GFNI (GH #5472)
* Add optimized and constant-time Whirlpool implementations using AVX2 and AVX512 (GH #5453 #5473)
* Add SSSE3/NEON and AVX2 optimized codepaths for CTR (GH #5474 #5480)
* Add constant time implementations of Camellia, ARIA, SEED and SM4 using AES-NI or ARMv8 AES instructions to implement sbox lookups (GH #5476 #5477 #5479 #5481 #5485 #5492)
* Improve performance of the AVX512 implementation of SHA-512 especially for Clang (GH #5490)
* Optimizations for the IDEA modular multiplication (GH #5484)
* Fix various minor TLS conformance issues flagged by TLS-Anvil (GH #5494 #5498)
* Fix bug in Ed25519 where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. (GH #5454)
* Fix a bug in handling of ECDSA DER-encode signatures where an invalid signature checked with PK_Verifier might cause a later valid signature to be * rejected. (GH #5455)
* Fix a problem introduced in 3.11.0 which could cause crashes on processors without SSSE3 support, particularly when compiled by GCC. (GH #5460 #5463 #5469)
* Fix various new warnings from clang-tidy 22 (GH #5456)
* Fix a compilation error introduced in 3.11.0 which prevented using ffi unless bcrypt was also enabled. (GH #5462)
* Avoid a macro collision with Microsoft headers that could cause a compilation problem in amalgamation mode. (GH #5486)
* Enable explicit_bzero, getentropy, getrandom on Hurd (GH #5488)
* Mon Nov 17 2025 Angel Yankov <angel.yankov@suse.com>
- Bump to Botan 3.10.0
* Add support for Ascon AEAD, hash and XOF from NIST SP 800-232 (GH #5061 #5076 #5097)
* Add support for building with clang-cl (GH #4255)
* Optimizations for base58 encoding and decoding (GH #5051)
* Optimizations for SHA-3/SHAKE (GH #5133)
* Optimizations for SEED (GH #5147)
* Optimizations and cleanups for BLAKE2s (GH #5117)
* Optimizations for Streebog (GH #5111)
* Add new interface to Certificate_Store allowing search by issuer DN plus serial. (GH #5072)
* Fix a bug preventing botan_srp6_server_session_step1 from being reinvoked (GH #5112 #5135)
* Modify some bit operation functions to reduce risk of compilers introducing non-constant time behavior (GH #5066)
* Add new FFI functions for loading elliptic curve keys in SEC1 format (GH #5083)
* Add new FFI functions for viewing the value of a botan_mp_t (GH #5131)
* New faster implementation of Jacobi function (GH #5057)
* Add optimized integer division logic for various special cases (GH #5068 #5077)
* Correct documentation/comments relating to the maximum output length that botan_mp_to_hex might write (GH #5131 #5129)
* Fix an issue when trying to use CMake older than 3.18 (GH #5098 #5099)
* Add typing hints to the Python binding (GH #5086 #5092)
* Fix various issues flagged by the ruff Python linter (GH #5089)
* Fix a bug in the Python binding which prevented signing raw bytes with PKSign (GH #5082)
* Update configure to check for Fedora’s new location for trust roots (GH #5052)
* Remove various internal references to “EME”, an obsolete term used for RSA encryption padding that originates from IEEE 1363. (GH #5055)
* Fix various typos in the source and documentation (GH #5071 #5075 #5114)
* Add a .devcontainer setup (GH #5094)
For full release notes, see: https://botan.randombit.net/news.html#version-3-10-0-2025-11-06
* Fri Aug 22 2025 Angel Yankov <angel.yankov@suse.com>
- Bump to Botan 3.9.0
* Add SHA-1 implementation using AVX2/BMI2 (GH #4852)
* Add Camellia implementation using GFNI/AVX2 (GH #4848)
* Add SHACAL2 implementation using AVX512 (GH #4878)
* The eFrodoKEM TLS 1.3 ciphersuites have changed the suite code to match changes in OQS. (GH #4900)
* Add support for TLS 1.2 NULL cipher suites. These suites are disabled in the build by default, enable tls_null module to use. (GH #4776)
* Add support for X.509 extensions from RFC 3779 (GH #4699 #4883 #4884 #4886)
* Elliptic curve improvements (GH #4841 #4934 #4935 #4937 #4949 $4953 #4991)
* Add EC_Scalar::hash following RFC 9380’s hash_to_field (GH #4950)
* Modify the OID lookup system to use a static switch for builtin OIDs. (GH #4896 #4888)
* Optimizations for X448 and Ed448 (GH #5037)
* Modify BOTAN_CLEAR_CPUID so that clearing ssse3 also disables AVX2/AVX512 (GH #4853)
* Remove various internal references to “EMSA”, an obsolete term used for RSA signature padding that originates from IEEE 1363. (GH #5008 #5024)
For full release notes, see: https://botan.randombit.net/news.html#version-3-9-0-2025-08-05
* Tue Jun 17 2025 Angel Yankov <angel.yankov@suse.com>
- Bump to 3.8.1
* Discussion has started regarding plans for Botan4, current ETA 2027.
* Ongoing elliptic curve optimizations and cleanups
* Add support for SM4 instructions added in upcoming Intel processors
* Add support for extended private keys in ML-KEM to handle certain implementations which do not use the seed encoding.
* Add support for SHA-512 instructions added in upcoming Intel processors
* The SHA-1 implementation using SSE2 has been extended to support NEON and LoongArch LSX.
* The default TLS policy now prefers AES/GCM over ChaCha20Poly1305
* Add support for TLS 1.3 post-quantum KEM secp384r1/ML-KEM-1024
For a full changelog, see: https://botan.randombit.net/news.html#version-3-8-1-2025-05-07
* Wed Mar 12 2025 Angel Yankov <angel.yankov@suse.com>
- Botan 3.7.1, latest stable release
* Revert a change that prevented build.h from being usable from C applications.
* Add post-quantum scheme Classic McEliece
* In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
* Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
* In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
* Add new EC key constructors
* Internal EC optimizations and improvements
* Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
* Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
* TPM 2.0 improvements
* Fix a build issue when compiling with MSVC on ARM
* Find full changelog at: https://botan.randombit.net/news.html
* Tue Nov 05 2024 Stephan Hemeier <Sauerlandlinux@gmx.de>
- Botan 3.6.1, the latest stable release of the Botan 3 series
* Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
* Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
* Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
* Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
* In speed command line utility, also iterate keygen several times. (GH #4381)
* Fri Oct 25 2024 Angel Yankov <angel.yankov@suse.com>
- Botan 3.6.0, the latest stable release of the Botan 3 series
* Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
* Add support for AVX2-VAES instructions
* Add support for new ECC curves
* Fix: CVE-2024-50382
For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21
* Tue Jul 30 2024 Andreas Stieger <andreas.stieger@gmx.de>
- Botan 3.5.0, the latest stable release of the Botan 3 series
* TLS 1.3 supported
* large header cleanup compared to v2
* start support of Post Quantum Crypto
* removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
EOL at the end of 2024.
* Mon Jul 15 2024 Angel Yankov <angel.yankov@suse.com>
- Update to 2.19.5:
* Fix multiple Denial of service attacks due to X.509 cert processing:
* CVE-2024-34702 - bsc#1227238
* CVE-2024-34703 - bsc#1227607
* CVE-2024-39312 - bsc#1227608
* Fix a crash in OCB
* Fix a test failure in compression with certain versions of zlib
* Fix some iterator debugging errors in TLS CBC decryption.
* Avoid a miscompilation in ARIA when using XCode 14
* Fri Nov 17 2023 Marcus Meissner <meissner@suse.com>
- remove botan binary (moves to Botan3)
/usr/share/doc/packages/botan-3.13.0 /usr/share/doc/packages/botan-3.13.0/authors.txt /usr/share/doc/packages/botan-3.13.0/handbook /usr/share/doc/packages/botan-3.13.0/handbook/abi.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/bigint.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/block_cipher.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/cipher_modes.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/compression.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/contents.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/credentials_manager.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/cryptobox.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/ec_group.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/ecc.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/encoding.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/env_vars.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/ffi.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/filters.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/footguns.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/fpe.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/hash.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/kdf.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/keywrap.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/message_auth_codes.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/names.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/otp.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/passhash.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/pbkdf.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/pkcs11.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/pkcs12.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/providers.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/psk_db.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/pubkey.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/python.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/rng.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/roughtime.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/secmem.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/sodium.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/spake2p.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/srp.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/stream_ciphers.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/tls.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/tpm.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/tss.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/versions.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/x509.rst /usr/share/doc/packages/botan-3.13.0/handbook/api_ref/zfec.rst /usr/share/doc/packages/botan-3.13.0/handbook/authors.txt /usr/share/doc/packages/botan-3.13.0/handbook/building.rst /usr/share/doc/packages/botan-3.13.0/handbook/cli.rst /usr/share/doc/packages/botan-3.13.0/handbook/contents.rst /usr/share/doc/packages/botan-3.13.0/handbook/credits.rst /usr/share/doc/packages/botan-3.13.0/handbook/deprecated.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/configure.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/contents.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/continuous_integration.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/contributing.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/fuzzing.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/mistakes.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/next_major.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/oids.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/os.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/pcurves.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/reading_list.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/release_process.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/test_framework.rst /usr/share/doc/packages/botan-3.13.0/handbook/dev_ref/todo.rst /usr/share/doc/packages/botan-3.13.0/handbook/goals.rst /usr/share/doc/packages/botan-3.13.0/handbook/hardware_acceleration.rst /usr/share/doc/packages/botan-3.13.0/handbook/index.rst /usr/share/doc/packages/botan-3.13.0/handbook/migration_guide.rst /usr/share/doc/packages/botan-3.13.0/handbook/news_2x.rst /usr/share/doc/packages/botan-3.13.0/handbook/old_news.rst /usr/share/doc/packages/botan-3.13.0/handbook/openssl_migration_guide.rst /usr/share/doc/packages/botan-3.13.0/handbook/packaging.rst /usr/share/doc/packages/botan-3.13.0/handbook/pgpkey.txt /usr/share/doc/packages/botan-3.13.0/handbook/roadmap.rst /usr/share/doc/packages/botan-3.13.0/handbook/security.rst /usr/share/doc/packages/botan-3.13.0/handbook/sem_ver.rst /usr/share/doc/packages/botan-3.13.0/handbook/side_channels.rst /usr/share/doc/packages/botan-3.13.0/handbook/support.rst /usr/share/doc/packages/botan-3.13.0/handbook/threat_model.rst /usr/share/doc/packages/botan-3.13.0/license.txt /usr/share/doc/packages/botan-3.13.0/news.txt /usr/share/doc/packages/botan-3.13.0/pgpkey.txt /usr/share/licenses/Botan-doc /usr/share/licenses/Botan-doc/license.txt
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Sep 1 00:19:42 2026