Crypto++ 8.9

Crypto++ 8.9 was released on October 1, 2023. The 8.9 release was a minor, unplanned release. There were no CVEs and one memory error.

The 8.9 release was driven by GH #1231, and the failures of several ciphers when inString==outString. Also see GH #1231, Rabbit Produces null Keystream When inString == outString.

Download

The download is available from the Crypto++ website. The checksums for the download are below. Release signatures can be verified using GnuPG according to Release Signing.

• Download: cryptopp890.zip, cryptopp890.zip.sig
• SHA1: 3d24427762c3ee0f5bd80958a859bfb556ea42e2
• SHA256: 4cc0ccc324625b80b695fcd3dee63a66f1a460d3e51b71640cdbfc4cd1a3779c
• SHA512: 903970c4c0312272e93bae0cc3477be66b273dd38c9329fda9f7157ec44e247a3bc16b9d2b4ad625f258af0eaf2dc2c4210d4d14829b455f180983859a5c4b41
• BLAKE2b: 95fe0585cff826587a301dd3df863c39cba889d407bb70ae7b35a4f9a0f7f5fef83b1c65cb95923a05f8ae91f18ed20e88738e8bb081a3f9c8c49c2d67d44ecc

Mirrors for the download are below. Note that GitHub checksums on the ZIP or TAR are different because the service creates the archive from sources.

• GitHub cryptopp890.zip

Release Notes

The release notes for Crypto++ 8.9 follows.

• minor release, recompile of programs required
• expanded community input and support
• • 88 unique contributors as of this release
• add additional tests to datatest.cpp
• fix SIMON128 Asan finding on POWER8
• fix AES/CFB and AES/CTR modes self test failures when using Cryptogams AES on ARMv7
• fix ARIA/CTR mode self test failures when inString==outString
• fix HIGHT/CTR mode self test failures when inString==outString
• fix Rabbit/CTR mode self test failures when inString==outString
• fix HC128/CTR and HC256/CTR mode self test failures when inString==outString
• fix Prime Table and dangling reference to a temporary
• fix Singleton::Ref when using C++11 memory fences
• remove unneeded call to Crop() in Randomize()

Bug fixes and Minor Issues

• add additional tests to datatest.cpp (GH #1231)
• fix SIMON128 Asan finding on POWER8 (GH #1237)
• fix AES/CFB and AES/CTR modes self test failures when using Cryptogams AES on ARMv7 (GH #1236)
• fix ARIA/CTR mode self test failures when inString==outString (GH #1235)
• fix HIGHT/CTR mode self test failures when inString==outString (GH #1234)
• fix Rabbit/CTR mode self test failures when inString==outString (GH #1231)
• fix HC128/CTR and HC256/CTR mode self test failures when inString==outString (GH #1231)
• fix Prime Table and dangling reference to a temporary (GH #1210)
• fix Singleton::Ref when using C++11 memory fences (GH #1208)
• remove unneeded call to Crop() in Randomize() (GH #1206)

Memory Error

SIMON128 was flagged with an Asan finding on POWER8 and above. It was an off-by one, wild write. We did not receive reports of the error from users. Rather, it was uncovered by our test script cryptest.sh. Also see GH #1237, SIMON128 Asan failures on POWER8.

GCC 12 crash

cryptest.exe began experiencing crashes under GCC 12 and above. It appears GCC started removing live code. Building with GCC 12 and above now requires -fno-devirtualize option. See GH #1134 and GH #1141 for details.

CMake support

Abdessattar Sassi is now maintaining the CMake build system. Please visit abdes | cryptopp-cmake on GitHub.

Please note alternate build systems like Autotools and CMake are still not officially supported by the Crypto++ project. The project uses the makefile on Unix & Linux, and Visual Studio on Windows.

FIPS DLL deprecation

The FIPS DLL used to be an important artifact for Windows builds. NIST moved the Crypto++ library to the Historical Validation List in 2014. The Windows DLL is no longer validated.

The project files to build the FIPS DLL are cryptdll.vcxproj and dlltest.vcxproj. The projects are now deprecated and subject to removal.

File Changes

Below is a list of all files that were created or renamed at Crypto++ 8.9.

$ git diff-tree -r --summary CRYPTOPP_8_8_0 CRYPTOPP_8_9_0 | grep -v "change" | awk '{$2=$3=""; print $0}' | grep -E '(\.h|\.cpp|\.txt|\.dat)'
delete   aria_simd.cpp
create   primetab.cpp