me/guix
Archived
1
0
Fork 0
Code Activity

gnu: Go standard crypto library: Update to 0.0.0-3.b7391e9 [security fixes].

Browse source 
Fixes a vulnerability in 'golang.org/x/crypto/salsa20' where, if more than 256
GiB of keystream is generated, or if the counter otherwise grows greater than 32
bits, the amd64 implementation will first generate incorrect output, and then
cycle back to previously generated keystream.

https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113d

* gnu/packages/golang.scm (go-golang-org-x-crypto-bcrypt,
go-golang-org-x-crypto-blowfish, go-golang-org-x-crypto-pbkdf2,
go-golang-org-x-crypto-tea, go-golang-org-x-crypto-salsa20,
go-golang-org-x-crypto-cast5, go-golang-org-x-crypto-twofish,
go-golang-org-x-crypto-xtea, go-golang-org-x-crypto-ed25519,
go-golang-org-x-crypto-ripemd160, go-golang-org-x-crypto-blake2s,
go-golang-org-x-crypto-sha3, go-golang-org-x-crypto-ssh-terminal): Update to
0.0.0-3.b7391e9.
(go-golang-org-x-crypto-blake2s)[propagated-inputs]: Add
go-golang-org-x-sys-cpu.
(go-golang-org-x-crypto-blowfish, go-golang-org-x-crypto-pbkdf2,
go-golang-org-x-crypto-tea, go-golang-org-x-crypto-salsa20,
go-golang-org-x-crypto-cast5, go-golang-org-x-crypto-twofish,
go-golang-org-x-crypto-xtea, go-golang-org-x-crypto-ssh-terminal):
Inherit from go-golang-org-x-crypto-bcrypt.
This commit is contained in:
Leo Famulari 2019-03-26 18:36:30 -04:00
parent 4a136536e8
commit 9c1b4316dc
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08
1 changed files with 80 additions and 199 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

279
gnu/packages/golang.scm
View file

@ -4,7 +4,7 @@
;;; Copyright © 2016 Andy Wingo <wingo@igalia.com> ;;; Copyright © 2016 Andy Wingo <wingo@igalia.com>
;;; Copyright © 2016 Ludovic Courtès <ludo@gnu.org> ;;; Copyright © 2016 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2016, 2017 Petter <petter@mykolab.ch> ;;; Copyright © 2016, 2017 Petter <petter@mykolab.ch>
;;; Copyright © 2016, 2017 Leo Famulari <leo@famulari.name> ;;; Copyright © 2016, 2017, 2019 Leo Famulari <leo@famulari.name>
;;; Copyright © 2017 Sergei Trofimovich <slyfox@inbox.ru> ;;; Copyright © 2017 Sergei Trofimovich <slyfox@inbox.ru>
;;; Copyright © 2017 Alex Vong <alexvong1995@gmail.com> ;;; Copyright © 2017 Alex Vong <alexvong1995@gmail.com>
;;; Copyright © 2018 Tobias Geerinckx-Rice <me@tobias.gr> ;;; Copyright © 2018 Tobias Geerinckx-Rice <me@tobias.gr>
@ -775,8 +775,8 @@ expressing configuration which is easy for both humans and machines to read.")
(license license:mpl2.0)))) (license license:mpl2.0))))
(define-public go-golang-org-x-crypto-bcrypt (define-public go-golang-org-x-crypto-bcrypt
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (let ((commit "b7391e95e576cacdcdd422573063bc057239113d")
(revision "2")) (revision "3"))
(package (package
(name "go-golang-org-x-crypto-bcrypt") (name "go-golang-org-x-crypto-bcrypt")
(version (git-version "0.0.0" revision commit)) (version (git-version "0.0.0" revision commit))
@ -789,7 +789,7 @@ expressing configuration which is easy for both humans and machines to read.")
version "-checkout")) version "-checkout"))
(sha256 (sha256
(base32 (base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr")))) "1jqfh81mhgwcc6b9l0bs6rb0707s01qpvn7896i5bsmig46lc7zm"))))
(build-system go-build-system) (build-system go-build-system)
(arguments (arguments
`(#:import-path "golang.org/x/crypto/bcrypt" `(#:import-path "golang.org/x/crypto/bcrypt"
@ -801,186 +801,81 @@ password hashing function.")
(license license:bsd-3)))) (license license:bsd-3))))
(define-public go-golang-org-x-crypto-blowfish (define-public go-golang-org-x-crypto-blowfish
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-blowfish")
(name "go-golang-org-x-crypto-blowfish") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/blowfish"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "Blowfish in Go")
(uri (git-reference (description "This package provides a Go implementation of the Blowfish
(url "https://go.googlesource.com/crypto") symmetric-key block cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/blowfish"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Blowfish in Go")
(description "This package provides a Go implementation of the Blowfish
symmetric-key block cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-pbkdf2 (define-public go-golang-org-x-crypto-pbkdf2
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-pbkdf2")
(name "go-golang-org-x-crypto-pbkdf2") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/pbkdf2"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "PBKDF2 in Go")
(uri (git-reference (description "This package provides a Go implementation of the PBKDF2 key
(url "https://go.googlesource.com/crypto") derivation function.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/pbkdf2"
#:unpack-path "golang.org/x/crypto"))
(synopsis "PBKDF2 in Go")
(description "This package provides a Go implementation of the PBKDF2 key
derivation function.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-tea (define-public go-golang-org-x-crypto-tea
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-tea")
(name "go-golang-org-x-crypto-tea") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/tea"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "Tiny Encryption Algorithm (TEA) in Go")
(uri (git-reference (description "This packages a Go implementation of the Tiny Encryption
(url "https://go.googlesource.com/crypto") Algorithm (TEA) block cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/tea"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Tiny Encryption Algorithm (TEA) in Go")
(description "This packages a Go implementation of the Tiny Encryption
Algorithm (TEA) block cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-salsa20 (define-public go-golang-org-x-crypto-salsa20
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-salsa20")
(name "go-golang-org-x-crypto-salsa20") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/salsa20"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "Salsa20 in Go")
(uri (git-reference (description "This packages provides a Go implementation of the Salsa20
(url "https://go.googlesource.com/crypto") stream cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/salsa20"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Salsa20 in Go")
(description "This packages provides a Go implementation of the Salsa20
stream cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-cast5 (define-public go-golang-org-x-crypto-cast5
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-cast5")
(name "go-golang-org-x-crypto-cast5") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/cast5"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "Cast5 in Go")
(uri (git-reference (description "This packages provides a Go implementation of the Cast5
(url "https://go.googlesource.com/crypto") symmetric-key block cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/cast5"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Cast5 in Go")
(description "This packages provides a Go implementation of the Cast5
symmetric-key block cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-twofish (define-public go-golang-org-x-crypto-twofish
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-twofish")
(name "go-golang-org-x-crypto-twofish") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/twofish"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "Twofish in Go")
(uri (git-reference (description "This packages provides a Go implementation of the Twofish
(url "https://go.googlesource.com/crypto") symmetric-key block cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/twofish"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Twofish in Go")
(description "This packages provides a Go implementation of the Twofish
symmetric-key block cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-xtea (define-public go-golang-org-x-crypto-xtea
(let ((commit "0fcca4842a8d74bfddc2c96a073bd2a4d2a7a2e8") (package
(revision "2")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-xtea")
(name "go-golang-org-x-crypto-xtea") (arguments
(version (git-version "0.0.0" revision commit)) `(#:import-path "golang.org/x/crypto/xtea"
(source (origin #:unpack-path "golang.org/x/crypto"))
(method git-fetch) (synopsis "eXtended Tiny Encryption Algorithm (XTEA) in Go")
(uri (git-reference (description "This package provides a Go implementation of the eXtended
(url "https://go.googlesource.com/crypto") Tiny Encryption Algorithm (XTEA) block cipher.")))
(commit commit)))
(file-name (string-append "go.googlesource.com-crypto-"
version "-checkout"))
(sha256
(base32
"033ghifvrxmqr54nm8gmgxz7qxlqgw9z7z976kp88yf1rmxm2kjr"))))
(build-system go-build-system)
(arguments
`(#:import-path "golang.org/x/crypto/xtea"
#:unpack-path "golang.org/x/crypto"))
(synopsis "eXtended Tiny Encryption Algorithm (XTEA) in Go")
(description "This package provides a Go implementation of the eXtended
Tiny Encryption Algorithm (XTEA) block cipher.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-golang-org-x-crypto-ed25519 (define-public go-golang-org-x-crypto-ed25519
(package (package
@ -1024,6 +919,8 @@ hash algorithm.")))
(substitute-keyword-arguments (package-arguments go-golang-org-x-crypto-bcrypt) (substitute-keyword-arguments (package-arguments go-golang-org-x-crypto-bcrypt)
((#:import-path _) ((#:import-path _)
"golang.org/x/crypto/blake2s"))) "golang.org/x/crypto/blake2s")))
(propagated-inputs
`(("go-golang-org-x-sys-cpu" ,go-golang-org-x-sys-cpu)))
(synopsis "BLAKE2s in Go") (synopsis "BLAKE2s in Go")
(description "This package provides a Go implementation of the BLAKE2s (description "This package provides a Go implementation of the BLAKE2s
hash algorithm."))) hash algorithm.")))
@ -1365,33 +1262,17 @@ limiting in Go.")
(license license:bsd-3)))) (license license:bsd-3))))
(define-public go-golang-org-x-crypto-ssh-terminal (define-public go-golang-org-x-crypto-ssh-terminal
(let ((commit "95a4943f35d008beabde8c11e5075a1b714e6419") (package
(revision "1")) (inherit go-golang-org-x-crypto-bcrypt)
(package (name "go-golang-org-x-crypto-ssh-terminal")
(name "go-golang-org-x-crypto-ssh-terminal") (inputs
(version (git-version "0.0.0" revision commit)) `(("go-golang-org-x-sys-unix" ,go-golang-org-x-sys-unix)))
(source (origin (arguments
(method git-fetch) `(#:import-path "golang.org/x/crypto/ssh/terminal"
(uri (git-reference #:unpack-path "golang.org/x/crypto"))
(url "https://go.googlesource.com/crypto") (synopsis "Terminal functions for Go")
(commit commit))) (description "This package provides @{terminal}, which implements support
(file-name (string-append "go.googlesource.com-crypto-" functions for dealing with terminals, as commonly found on UNIX systems.")))
version "-checkout"))
(sha256
(base32
"0bkm0jx9mxmi1liabb9c04kf765n7d0062zdp3zmvzyamsq00lcx"))))
(build-system go-build-system)
(inputs
`(("go-golang-org-x-sys-unix" ,go-golang-org-x-sys-unix)))
(arguments
`(#:import-path "golang.org/x/crypto/ssh/terminal"
#:unpack-path "golang.org/x/crypto"))
(synopsis "Terminal functions for Go")
(description "This package provides @{terminal}, which implements
support functions for dealing with terminals, as commonly found on UNIX
systems.")
(home-page "https://go.googlesource.com/crypto/")
(license license:bsd-3))))
(define-public go-github-com-burntsushi-toml (define-public go-github-com-burntsushi-toml
(package (package