reop (reasonable expectation of privacy) is a utility that creates and
verifies cryptographic signatures. It supports both asymmetric and
symmetric encryption.
grepcidr can be used to filter a list of IP addresses against one or
more Classless Inter-Domain Routing (CIDR) specifications, or arbitrary
networks specified by an address range. As with grep, there are options
to invert matching and load patterns from a file. grepcidr is capable
of comparing thousands or even millions of IPs to networks with little
memory usage and in reasonable computation time.
grepcidr has endless uses in network software, including: mail filtering
and processing, network security, log analysis, and many custom applications.
- sodium_mlock()/sodium_munlock() have been introduced to lock pages
in memory before storing sensitive data, and to zero them before
unlocking them.
- High-level wrappers for crypto_box and crypto_secretbox
(crypto_box_easy and crypto_secretbox_easy) can be used to avoid
dealing with the specific memory layout regular functions depend on.
- crypto_pwhash_scryptxsalsa208sha256* functions have been added
to derive a key from a password, and for password storage.
- Salsa20 and ed25519 implementations now support overlapping
inputs/keys/outputs (changes imported from supercop-20140505).
- The poly1305-53 implementation has been replaced with Floodyberry's
poly1305-donna32 and poly1305-donna64 implementations.
- sodium_hex2bin() has been added to complement sodium_bin2hex().
- On OpenBSD and Bitrig, arc4random() is used instead of reading
/dev/urandom.
- crypto_auth_hmac_sha512() has been implemented.
- sha256 and sha512 now have a streaming interface.
- hmacsha256, hmacsha512 and hmacsha512256 now support keys of
arbitrary length, and have a streaming interface.
- crypto_verify_64() has been implemented.
- CPU features are now detected at runtime.
Supervisor is a client/server system that allows its users to monitor
and control a number of processes on UNIX-like operating systems.
[...]
ok sthen@
compiling with -Os would not trigger the ICE. Temporary bandaid (which is
likely to last for a long time...) until Someone(TM) investigates further.
ok landry@
"snapshot" branch 9 years ago (in fact the 1.4 branch has really only
received a couple of security fixes since 2002).
No naysayers, and positive feedback about the removal from ajacoutot and brad.