Crypto++ 5.6.3

Crypto++ 5.6.3 was released on November 20, 2015. The 5.6.3 release was mostly a maintenance release. The release included a few new minor classes, like Base64URLEncoder to provide encoding and decoding using a web safe alphabet.

Download

The download is available from the Crypto++ website. The checksums for the download are below.

• Original cryptopp563.zip
• SHA-1: f2fcd1fbf884bed70a69b565970ecd8b33a68cc4
• SHA-256: 9390670a14170dd0f48a6b6b06f74269ef4b056d4718a1a329f6f6069dc957c9
• SHA-512: b3b963e87d937aeae03aa41849c23bb03fc0a8e627afddb8aa74bc07edf51949888aaa25cb4888053455524e7c5dd8de1f11e227acfab3a3ea344285b6408ce0
• WHIRLPOOL: 1f7716f143a6677be213e29330ed0cbcd16db0fe575487b35c071e3ee12bff0471b1c82fa43590ac708c06dbcd4d9c39499a4b8dfa89a3f410d3b0be376f5268

Mirrors for the download are below. Note that GitHub and Sourceforge checksums on the ZIP or TAR are different because each creates the archive from sources.

• GitHub cryptopp563.zip
• Sourceforge cryptopp563.zip

Release Notes

The release notes for Crypto++ 5.6.3 follows.

• fixed CVE-2015-2141
• cleared most Undefined Behavior Sanitizer (UBsan) findings
• cleared all Address Sanitizer (Asan) findings
• cleared all Valgrind findings
• cleared all Coverity findings
• cleared all Enterprise Analysis (/analyze) findings
• cleared most GCC warnings with -Wall
• cleared most Clang warnings with -Wall
• cleared most MSVC warnings with /W4
• added -fPIC to 64-bit builds (off for 32-bit builds)
• added HKDF class from RFC 5869
• switched to member_ptr due to C++ 11 warnings for auto_ptr
• initialization of C++ static objects, off by default
  • GCC and init_priotirty/constructor attributes
  • MSVC and init_seg(lib)
  • CRYPTOPP_INIT_PRIORITY disabled by default, but available
• improved OS X support
• improved GNUmakefile support for Testing and QA
• added self tests for additional Testing and QA
• added cryptest.sh for systematic Testing and QA
• added GNU Gold linker support
• added Visual Studio 2010 solution and project files in vs2010.zip
• added Clang integrated assembler support
• unconditionally define CRYPTOPP_NO_UNALIGNED_DATA_ACCESS for Makefile target 'ubsan' and at -O3
• workaround ARMEL/GCC 5.2 bug and failed self test
• fixed crash in MQV due to GCC 4.9+ and inlining
• fixed hang in SHA due to GCC 4.9+ and inlining
• fixed missing rdtables::Te under VS with ALIGNED_DATA_ACCESS
• fixed S/390 and big endian feature detection
• fixed S/390 and int128_t/uint128_t detection
• fixed X32 (ILP32) feature detection
• removed _CRT_SECURE_NO_DEPRECATE for Microsoft platforms
• utilized bound checking interfaces from ISO/IEC TR 24772 when available
• improved ARM, ARM64, MIPS, MIPS64, S/390 and X32 (ILP32) support
• introduced CRYPTOPP_MAINTAIN_BACKWARDS_COMPATIBILITY_562
• added additional Doxygen-based documentation
• ported to MSVC 2015, Xcode 7.2, GCC 5.2, Clang 3.7, Intel C++ 16.00

Governance

In June 2015 Wei Dai stepped away from the Crypto++ library to work on other projects. Crypto++ is now maintained by the Crypto++ community. Wei still advises us when we have questions.

File Changes

Below is a list of files that were added or deleted at Crypto++ 5.6.3.

$ git diff-tree -r --summary CRYPTOPP_5_6_2 CRYPTOPP_5_6_3 | grep -v "change" | awk '{$2=$3=""; print $0}'
create .gitignore
create Filelist.txt
create GNUmakefile-cross
create Install.txt
create TestVectors/hkdf.txt
create config.recommend
create cryptest.sh
create hkdf.h
create make-rdrand.cmd
create mersenne.h
create rdrand-masm.cmd
create rdrand-nasm.sh
create rdrand.S
create rdrand.asm
create rdrand.cpp
create rdrand.h
create trap.h
create vs2010.zip