| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libIPSec_MB3 | Distribution: openSUSE Tumbleweed |
| Version: 3.0.1 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Oct 30 22:50:01 2026 |
| Group: System/Libraries | Build host: reproducible |
| Size: 5585661 | Source RPM: intel-ipsec-mb-3.0.1-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/intel/intel-ipsec-mb | |
| Summary: IPSec cryptography library optimized for Intel Architecture | |
An IPSec cryptography library optimized for Intel Architecture and primarily targeted at packet processing applications.
Apache-2.0 AND BSD-3-Clause
* Fri Oct 30 2026 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Added ipsecmb_v3_1.patch file fixing 15.7 x86_64 compilation errors and warnings
- Added intel-ipsec-mb-rpmlintrc file to fix one rpmlint warning
* Fri Oct 30 2026 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Removed installation of the man page
- Fixed rpmlint warning
- Fixed compilation errors and warnings on 15.7 x86_64
* Fri Oct 23 2026 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Fixed spec file references to README and ReleaseNotes.txt
* Fri Oct 23 2026 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v3.0.1:
* Build system: removed legacy Makefile and Windows `.mak` builds; CMake is now the only supported build flow.
* Build system: GCC and Clang builds now use the C11 standard.
* Licensing: replaced full BSD-3-Clause license text in source files with SPDX identifiers.
* OpenSSL: added `imb-provider`, an OpenSSL 3.x test provider supporting symmetric crypto, hash/HMAC and PQC operations, including asynchronous operation.
* Self-tests: library initialization now fails closed on self-test failure, preventing cryptographic operations on the affected manager until successful reinitialization.
* Architecture support: added AVX10 architecture support.
* AES: added AVX2 Type 2 implementations for AES-CFB, AES-CBC, AES-CMAC and AES-CCM.
* HMAC-SHA1: added variable tag sizes from 4 to 20 bytes.
* SHA3/SHAKE: added SHA3-224/256/384/512, SHAKE128/256 and HMAC-SHA3 support, including optimized AVX2 and AVX512 implementations.
* Zero-length messages: extended support across HMAC and AES-CBC algorithms.
* 3GPP: added implementations of the new 256-bit confidentiality, integrity and combined algorithms based on AES, SNOW5G and ZUC.
* DES/3DES: added a new common SSE Type 1 DES block encryption implementation.
* PQC: added ML-DSA (FIPS 204) and ML-KEM (FIPS 203), including all standardized parameter sets.
* CRC: added AVX2 Type 2 implementations using 256-bit VPCLMULQDQ polynomial folding.
* Constant-time validation: added `CONSTANT_TIME_VALIDATION` build option for detecting secret-dependent branches and memory accesses using Valgrind.
* Wireless algorithms: removed bit-length APIs and non-byte-aligned message length/offset support.
* Direct APIs: removed direct API support for ZUC-EEA3/EIA3, SNOW3G-UEA2/UIA2, KASUMI-F8/F9 and CRC; these algorithms remain available through the job API.
* Removed AES-CTR bit-length, AES-CBCS 1:9, SNOW-V/AEAD SNOW-V, ZUC-EEA3-256 and ZUC-EIA3-256 support.
* Removed QUIC API, custom cipher and custom hash support.
* API validation: added AES-CBC/AES-CFB message length checks and updated CFB APIs to return operation status.
* Test applications: added `imb-safe-check` for detection of sensitive data left in registers and memory.
* Test applications: added `imb-oob` for detecting out-of-bounds reads and writes using guard pages.
* Test applications: expanded SHA3, SHAKE, ML-DSA and ML-KEM coverage across `imb-kat`, `imb-xvalid`, `imb-acvp` and fuzz testing.
* Test applications: added ABI checking and improved zero-length message testing.
* Wycheproof: moved Project Wycheproof coverage into `imb-kat`, updated to the upstream v1 vector set and removed `imb-wycheproof`.
* Performance: added `imb-perf-cmp.py`, PQC benchmarking with `imb-speed-pqc`, SHA3/SHAKE and AVX10 support, and improved `imb-perf` stability.
* Performance: renamed `ipsec_perf_tool.py` to `imb-perf-tool.py` and enhanced core selection and algorithm filtering.
* Tools: added assembly formatting and coverage tools, plus source-file non-ASCII character detection and replacement.
- Fixed issues:
* Fixed SM4-GCM plaintext/ciphertext address calculation (issue #159).
* Fixed SNOW3G and KASUMI JOB API destination pointer calculation (issue #162).
* Fixed SNOW-V-AEAD ciphertext address calculation (issue #161).
* Fixed MD5-HMAC mapping in the performance application.
* Fixed AES-GCM key structure alignment.
* Fixed DES/3DES-CBC plaintext/ciphertext output (issue #169).
* Fixed key pointer handling for AES-GCM, AES-GCM-SGL and SM4-GCM decryption.
* Fixed PON XGEM PLI validation that could result in out-of-bounds memory access.
* Fixed MinGW build issues (issue #185).
* Fixed Windows GCC/MinGW stack alignment issue affecting ZUC-NCA6.
* Fixed AVX10 architecture auto-detection.
* Fixed GHASH job API out-of-bounds read for tag lengths below 16 bytes.
- More details at:
* [intel-ipsec-mb v3.0.0 release](https://github.com/intel/intel-ipsec-mb/releases/tag/v3.0.0)
* Thu May 28 2026 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v2.0.2
* Fix for zero-length message handling in AES-CBC decryption.
* Fix for AES-CTR IV handling for zero-length messages.
* Allow zero-length messages and handle them correctly for HMAC-MD5, HMAC-SHA1, HMAC-SHA256, HMAC-SHA512, AES-CMAC, and AES-XCBC.
* Fix for DES/TDES IV handling for zero-length messages.
* Fix message handling for XGEM header size on AVX512 Type 2 systems.
* Tue Jul 29 2025 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v2.0.1:
* Fix for issue #169 where DES-CBC and 3DES-CBC may produce wrong output.
* SPEC file changed to use CMake and CTest vs GNU Make. README, ReleaseNotes and man page files moved to the standard package.
* Thu Jan 16 2025 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v2.0:
* YASM support removed.
* CMake: CET support added, man page installation fix, FreeBSD support added.
* Replaced Makefiles with CMake as default build system.
* Updated style check to clang-format version 18.
* AES-GCM: reduced binary size, small packet optimization, removed AVX512 type 1, improved AVX2 type 1, new AVX2 type 2 added.
* DES, 3DES/TDES and DES-DOCSIS: binary size reduction, reduced stack frame size, re-used common transpose macros.
* Fixed LFSR update in single buffer ZUC API implementation.
* SM4: added SM4-CTR and SM4-GCM SSE code, added AVX2-SM4-NI code for SM4-GCM, SM4-CTR, SM4-CBC and SM4-ECB.
* SHA2-512/384 & and HMAC-SHA2-512/384: added AVX2-SHA512-NI single-buffer and x2 multi-buffer code.
* SM3 and SM3-HMAC: added SM3-NI implementations.
* Added AES-CFB SSE type 1 and AVX512 type 2 implementations.
* Removed AESNI emulation support.
* Removed AVX Type 2 implementation.
* Removed AES-CMAC, AES-CCM, AES-CBC and AES-ECB x4 and by4 implementations from SSE type 1.
* Removed AVX type 1 implementations: SHA/MD5, CHACHA20-POLY1305, SNOW3G and KASUMI.
* Removed AVX architecture type.
* Changed SHA1 on AVX2 type 4 architecture to use multi-buffer implementation.
* Added check for XSAVE and OSXSAVE CPUID features for any AVX architecture type.
* Extended cipher burst API support with: AES-ECB, AES-CFB.
* Extended hash burst API support with: SHA1, SHA2-384/512, AES-CMAC.
* Added AEAD burst API with AES-CCM support.
* Added new API to retrieve optimal minimum burst size for hash, cipher and AEAD API's.
- Fixed issues:
* Version 1.5 fails to build on FreeBSD 13.2 (amd64) using CMake (issue #136)
* Make CMake builds behave more "normal" (issue #141)
* printf in lib code prevents using ipsec-mb in SGX environment (issue #142)
* EEA3(ZUC) 1 Buffer implementation LFSR update can result in invalid LFSR state, causing incorrect keystream generation (issue #144)
* Possible regression: init_mb_mgr_avx() corrupts state on Windows (issue #147)
* Crash seen on VMware with dpdk crypto using ipsec-mb library (issue #153)
- More details at https://github.com/intel/intel-ipsec-mb/releases/tag/v2.0
* Fri Nov 17 2023 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v1.5:
* CMake MinGW support added.
* QUIC CHACHA20-POLY1305 and CHACHA20 HP API added.
* AVX2-VAES AES-CTR and AES-GCM implementations added.
* SSE SM4-ECB and SM4-CBC implementations added.
* x86-64 SM3 and SM3-HMAC implementations added.
* Self-Test callback functionality added with message corrupt option.
* Implemented a workaround for false load-block condition in SSE AES-CBC implementations.
* Optimized CRC32 algorithms, AES-GCM AVX2 and AES-GCM AVX512 implementations.
* Updated ACVP app (imb-acvp) to support libacvp v2.0+.
* Test vector format standardized for various algorithms (CBC/CFB/CTR/ECB/DES/GCM/CCM/CHACHA20-POLY/SNOW3G/ZUC/KASUMI/SNOW-V).
* Extended xvalid app to test burst API.
* Burst API is used by default in imb-perf tool.
- Fixed issues:
* CMake files ignore LIB_INSTALL_DIR and incorrectly put the shared libraries in /usr/lib (issue #125)
* The CMakefile does not install the headers (normal Makefile does) (issue #126)
* File ./test/acvp-app/utils.o is not removed after "make clean" (issue #130)
* nasm can not find .inc .asm files when building with CMake (issue #131)
- More details at https://github.com/intel/intel-ipsec-mb/releases/tag/v1.5
* Tue Aug 08 2023 Tomasz Kantecki <tomasz.kantecki@intel.com>
- Update to v1.4:
* POLY1305 AVX2 with AVX-IFMA instructions added.
* Optimized GHASH component in AVX512 VAES (type2) AES-GCM implementation.
* Implemented a workaround for false load-block condition in SSE and AVX2 AES-GCM implementations.
* Removed AVX AES-GCM implementation, its API symbols map to the SSE implementation.
* QUIC header protection API added.
* QUIC AES-GCM-128/256 AEAD API added.
* Removed v0.53 (and older) compatibility symbol mapping (NO_COMPAT_IMB_API_053 not defined).
* ZUC AVX2-GFNI implementation added.
* SHA-NI instructions enabled to use in SHA1/224/256 direct API
* New API (imb_set_session) added to be used with burst API, helping speeding up the crypto scheduling.
* New API added to calculate IPAD/OPAD for SHAx-HMAC.
* New direct API added to calculate DES-CFB and AES-CFB-256 on a single block.
- Fixed issues:
* MB_MGR corruption at initialization
* Performance scaling
- More details at https://github.com/intel/intel-ipsec-mb/releases/tag/v1.4
* Wed Oct 05 2022 Stephen Mcintyre <stephen.mcintyre@intel.com>
- Update for release package v1.3
/usr/lib64/libIPSec_MB.so.3 /usr/lib64/libIPSec_MB.so.3.0.1 /usr/share/doc/packages/libIPSec_MB3 /usr/share/doc/packages/libIPSec_MB3/README.md /usr/share/doc/packages/libIPSec_MB3/ReleaseNotes.md /usr/share/licenses/libIPSec_MB3 /usr/share/licenses/libIPSec_MB3/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Nov 9 22:58:56 2026