Updated to version 2.17.

Pkgsrc changes:
  none

Changes since version 2.15:
===========================
2.17    Mon Jan  9 18:22:51 EST 2006
        -IMPORTANT NOTE: Versions of this module prior to 2.17 were incorrectly
	using 8 byte IVs when generating the old-style RandomIV style header
	(as opposed to the new-style random salt header). This affects data
        encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
        and is a significant security issue.

        The bug has been corrected in versions 2.17 and higher by making it
        impossible to use 16-byte block ciphers with RandomIV headers. You may
        still read legacy encrypted data by explicitly passing the
        -insecure_legacy_decrypt option to Crypt::CBC->new().

        -The salt, iv and key are now reset before each complete encryption
         cycle. This avoids inadvertent reuse of the same salt.

        -A new -header option has been added that allows you to select
         among the various types of headers, and avoids the ambiguity
         of having multiple interacting options.

        -A new random_bytes() method provides access to /dev/urandom on
         suitably-equipped hardware.

2.16	Tue Dec  6 14:17:45 EST 2005
	- Added two new options to new():
	  -keysize   => <bytes>  Force the keysize -- useful for Blowfish
	  -blocksize => <bytes>  Force the blocksize -- not known to be useful

	  ("-keysize=>16" is necessary to decrypt OpenSSL messages encrypted
	  with Blowfish)
This commit is contained in:
heinz 2006-03-12 01:32:31 +00:00
parent b247cede39
commit 4453fb254d
2 changed files with 6 additions and 6 deletions

View file

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.19 2006/02/12 00:52:20 heinz Exp $
# $NetBSD: Makefile,v 1.20 2006/03/12 01:32:31 heinz Exp $
DISTNAME= Crypt-CBC-2.15
DISTNAME= Crypt-CBC-2.17
PKGNAME= p5-${DISTNAME}
SVR4_PKGNAME= p5cbc
CATEGORIES= security perl5

View file

@ -1,5 +1,5 @@
$NetBSD: distinfo,v 1.8 2006/02/12 00:52:20 heinz Exp $
$NetBSD: distinfo,v 1.9 2006/03/12 01:32:31 heinz Exp $
SHA1 (Crypt-CBC-2.15.tar.gz) = c57abf8be7af065e3ba69d87a6efcfcdd3057e0b
RMD160 (Crypt-CBC-2.15.tar.gz) = 721fed9fc9e3f025a825e51cc9bf7b14def1eb7f
Size (Crypt-CBC-2.15.tar.gz) = 14344 bytes
SHA1 (Crypt-CBC-2.17.tar.gz) = 1e5d5fdba77b3425bd780d8aa4ddbcb8c01539cd
RMD160 (Crypt-CBC-2.17.tar.gz) = 99116bb9eccfc7d1f8f44ce46ee047e7df2d478a
Size (Crypt-CBC-2.17.tar.gz) = 18543 bytes