Crypto++ 8.8

Crypto++ 8.8 was released on June 25, 2023. The 8.8 release was a minor, planned release. There were no CVEs and no memory errors.

Download

The download is available from the Crypto++ website. The checksums for the download are below. Release signatures can be verified using GnuPG according to Release Signing.

• Download: cryptopp880.zip, cryptopp880.zip.sig
• SHA1: 1f4b88ffb14ac9ac591e1d3e883e770f4f2c04c8
• SHA256: ace1c7b010a409eba5e86c4fd5a8845c43a6ac39bb6110e64ca5d7fea08583f4
• SHA512: 3fb1c591735f28dbd1329a6de6de9c495388c88bd5c4f077894c41668398ed313f14121a4553e0d4aa71e552ee8c3b744b770711748528ade71043ecc6159c80
• BLAKE2b: bdce352af83ff148cedbe0233efd3352d5052e6b4ea04484de11e35a8cb5d51cf6bd5aa641ada1bc4535454c1a1afdbfb96f4ae2ef5131d79a7985247810f423

Mirrors for the download are below. Note that GitHub checksums on the ZIP or TAR are different because the service creates the archive from sources.

• GitHub cryptopp880.zip

Release Notes

The release notes for Crypto++ 8.8 follows.

• minor release, recompile of programs required
• expanded community input and support
• • 88 unique contributors as of this release
• fix crash in cryptest.exe when invoked with no options
• fix crash in library due to GCC removing live code
• fix RSA with key size 16 may provide an invalid key
• fix failure to build on 32-bit x86
• fix failure to build on iPhone Simulator for arm64
• fix failure to build on Windows arm64
• test for SSSE3 before using the ISA
• fix include of <x86intrin.h> when using MSVC
• improve performance of CRC32C_Update_SSE42 for x86-64
• update documentation

Bug fixes and Minor Issues

• fix crash in cryptest.exe when invoked with no options (GH 1141)
• fix crash in library due to GCC removing live code (GH #1134, GH #1141)
• fix RSA with key size 16 may provide an invalid key (GH #1136)
• fix failure to build on 32-bit x86 (GH #1142)
• fix failure to build on iPhone Simulator for arm64 (GH #1142)
• fix failure to build on Windows arm64 (GH #1155, GH #1156)
• test for SSSE3 before using the ISA (GH #1163)
• fix include of <x86intrin.h> when using MSVC (GH #1198)
• improve performance of CRC32C_Update_SSE42 for x86-64 (GH #1202)
• update documentation

GCC 12 crash

cryptest.exe began experiencing crashes under GCC 12 and above. It appears GCC started removing live code. Building with GCC 12 and above now requires -fno-devirtualize option. See GH #1134 and GH #1141 for details.

CMake support

Abdessattar Sassi is now maintaining the CMake build system. Please visit abdes | cryptopp-cmake on GitHub.

Please note alternate build systems like Autotools and CMake are still not officially supported by the Crypto++ project. The project uses the makefile on Unix & Linux, and Visual Studio on Windows.

FIPS DLL deprecation

The FIPS DLL used to be an important artifact for Windows builds. NIST moved the Crypto++ library to the Historical Validation List in 2014. The Windows DLL is no longer validated.

The project files to build the FIPS DLL are cryptdll.vcxproj and dlltest.vcxproj. The projects are now deprecated and subject to removal.

File Changes

Below is a list of all files that were created or renamed at Crypto++ 8.8.

$ git diff-tree -r --summary CRYPTOPP_8_7_0 CRYPTOPP_8_8_0 | grep -v "change" | awk '{$2=$3=""; print $0}' | grep -E '(\.h|\.cpp|\.txt|\.dat)'
create mode 100644 TestPrograms/test_nodevirtualize.cpp
delete mode 100755 TestScripts/cryptest-cmake.sh
create mode 100644 TestScripts/cryptopp-compiler.cpp