fixes #4477 (libsodium: update to 1.0.20)

3 files changed, 142 insertions, 3 deletions

diff --git a/libs/libsodium/docs/AUTHORS b/libs/libsodium/docs/AUTHORS
index 6240b1dc37..51893dfc83 100644
--- a/libs/libsodium/docs/AUTHORS
+++ b/libs/libsodium/docs/AUTHORS
@@ -2,6 +2,9 @@
 Designers

 =========

 

+aegis                                  Hongjun Wu

+                                       Bart Preneel

+

 argon2                                 Alex Biryukov

                                        Daniel Dinu

                                        Dmitry Khovratovich

@@ -28,6 +31,13 @@ ed25519                                Daniel J. Bernstein
 

 poly1305                               Daniel J. Bernstein

 

+ristretto                              Mike Hamburg

+                                       Henry de Valence

+                                       Jack Grigg

+                                       George Tankersley

+                                       Filippo Valsorda

+                                       Isis Lovecruft

+

 salsa20                                Daniel J. Bernstein

 

 scrypt                                 Colin Percival

@@ -38,8 +48,10 @@ siphash                                Jean-Philippe Aumasson
 Implementors

 ============

 

-crypto_aead/aes256gcm/aesni            Romain Dolbeau

-                                       Frank Denis

+crypto_aead/aegis128l                  Frank Denis

+crypto_aead/aegis256

+

+crypto_aead/aes256gcm/aesni            Frank Denis

 

 crypto_aead/chacha20poly1305           Frank Denis

 

@@ -56,6 +68,7 @@ crypto_box/curve25519xchacha20poly1305 Frank Denis
 

 crypto_core/ed25519                    Daniel J. Bernstein

                                        Adam Langley

+                                       Frank Denis

 

 crypto_core/hchacha20                  Frank Denis

 

@@ -93,6 +106,8 @@ crypto_scalarmult/curve25519/sandy2x   Tung Chou
 

 crypto_scalarmult/ed25519              Frank Denis

 

+crypto_scalarmult/ristretto255         Frank Denis

+

 crypto_secretbox/xsalsa20poly1305      Daniel J. Bernstein

 

 crypto_secretbox/xchacha20poly1305     Frank Denis

diff --git a/libs/libsodium/docs/ChangeLog b/libs/libsodium/docs/ChangeLog
index 288f58ccab..374063fc05 100644
--- a/libs/libsodium/docs/ChangeLog
+++ b/libs/libsodium/docs/ChangeLog
@@ -1,3 +1,127 @@
+* Version 1.0.20

+  This point release includes all the changes from 1.0.19-stable,

+mainly addressing compilation issues and improvements to the .NET

+packages.

+

+* Version 1.0.19-stable

+ - Building with `zig build` now requires Zig 0.12.

+ - When using the traditional build system, -O3 is used instead of -Ofast.

+ - Improved detection of the compiler flags required on aarch64.

+ - Improved compatibility with custom build systems on aarch64.

+ - apple-xcframework: VisionOS packages are not built if Xcode doesn't

+include that SDK.

+ - `crypto_kdf_hkdf_sha512_statebytes()` was added.

+ - When using Visual Studio, runtime CPU feature detection is now enabled

+on Windows/aarch64.

+ - There were issues with C++ guards affecting usage of libsodium

+using Swift on Windows. This has been fixed.

+ - Emscripten: `crypto_aead_aegis*()` functions are now exported in

+JavaScript builds

+ - Emscripten: unsupported `--memory-init-file` option has been removed.

+ - apple-xcframework: the minimal deployment target can be set to iOS 11+.

+ - .NET packages now include precompiled libraries for Windows/arm64,

+iOS, TvOS and Catalyst.

+ - .NET precompiled libraries now work on any CPUs, using only runtime

+feature detection.

+ - SYSV assembly should not be used when targeting Windows (reported by

+@meiyese, thanks!)

+ - Compatibility issues with LLVM 18 and AVX512 have been addressed.

+ - GitHub attestation build provenance are now added to NuGet packages.

+ - JavaScript tests can now use Bun as an alternative to Node.

+

+* Version 1.0.19

+  This release includes all the changes from 1.0.18-stable, as well as two

+additions:

+

+ - New AEADs: AEGIS-128L and AEGIS-256 are now available in the

+`crypto_aead_aegis128l_*()` and `crypto_aead_aegis256_*()` namespaces.

+AEGIS is a family of authenticated ciphers for high-performance applications,

+leveraging hardware AES acceleration on `x86_64` and `aarch64`. In addition

+to performance, AEGIS ciphers have unique properties making them easier and

+safer to use than AES-GCM. They can also be used as high-performance MACs.

+ - The HKDF key derivation mechanism, required by many standard protocols, is

+now available in the `crypto_kdf_hkdf_*()` namespace. It is implemented for

+the SHA-256 and SHA-512 hash functions.

+ - The `osx.sh` build script was renamed to `macos.sh`.

+ - Support for android-mips was removed.

+

+* Version 1.0.18-stable

+ - Visual Studio: support for Windows/ARM64 builds has been added.

+ - Visual Studio: AVX512 implementations are enabled on supported CPUs.

+ - Visual Studio: an MSVC 2022 solution was added.

+ - Apple XCFramework: support for VisionOS was added.

+ - Apple XCFramework: support for Catalyst was added.

+ - Apple XCFramework: building the simulators is now optional.

+ - iOS: bitcode is not generated any more, as it was deprecated by Apple.

+ - watchOS: support for arm64 was added.

+ - The Zig toolchain can now be used as a modern build system to replace

+autoconf/automake/libtool/make/ccache and the compiler. This enables faster

+compilation times, easier cross compilation, and static libraries optimized

+for any CPU.

+ - The Zig toolchain is now the recommended way to compile `libsodium`

+to WebAssembly/WASI(X).

+ - libsodium can now be added as a dependency to Zig projects.

+ - Memory fences were added to remove some gadgets that could be used

+alongside speculative loads.

+ - The AES-GCM implementation was completely rewritten. It is now faster,

+and also available on aarch64, including Windows/ARM64.

+ - Compatibility with CET instrumentation / IBT / Shadow Stack was added.

+ - Emscripten: the `crypto_pwhash_*()` functions have been removed from Sumo

+builds, as they reserve a substantial amount of JavaScript memory, even when

+not used.

+ - Benchmarks now use `CLOCK_MONOTONIC` if possible.

+ - WebAssembly: tests can now run using Bun, WasmEdge, Wazero, wasm3 and

+wasmer-js. Support for WAVM and Lucet have been removed, as these projects

+have reached EOL.

+ - .NET: the minimum supported macOS version is now 1.0.15; this matches

+Microsoft guidelines.

+ - .NET: all the packages are now built using Zig, on all platforms. This

+allows us to easily match Microsoft's requirements, including supported glibc

+versions. However, on x86_64, targets are expected to support at least the

+AVX instruction set.

+ - .NET: packages for ARM64 are now available.

+ - C23 `memset_explicit()` is now used, when available.

+ - Compilation now uses `-Ofast` or `-O3` instead of `-O2` by default.

+ - Portability improvements to help compile libsodium to modern game consoles.

+ - JavaScript: a default `unhandledRejection` handler is not set any more.

+ - Slightly faster 25519 operations.

+ - OpenBSD: leverage `MAP_CONCEAL`.

+

+* Version 1.0.18

+ - Enterprise versions of Visual Studio are now supported.

+ - Visual Studio 2019 is now supported.

+ - 32-bit binaries for Visual Studio 2010 are now provided.

+ - A test designed to trigger an OOM condition didn't work on Linux systems

+with memory overcommit turned on. It has been removed in order to fix

+Ansible builds.

+ - Emscripten: `print` and `printErr` functions are overridden to send

+errors to the console, if there is one.

+ - Emscripten: `UTF8ToString()` is now exported since `Pointer_stringify()`

+has been deprecated.

+ - Libsodium version detection has been fixed in the CMake recipe.

+ - Generic hashing got a 10% speedup on AVX2.

+ - New target: WebAssembly/WASI (compile with `dist-builds/wasm32-wasi.sh`).

+ - New functions to map a hash to an edwards25519 point or get a random point:

+`core_ed25519_from_hash()` and `core_ed25519_random()`.

+ - `crypto_core_ed25519_scalar_mul()` has been implemented for

+`scalar*scalar (mod L)` multiplication.

+ - Support for the Ristretto group has been implemented for interoperability

+with wasm-crypto.

+ - Improvements have been made to the test suite.

+ - Portability improvements have been made.

+ - `getentropy()` is now used on systems providing this system call.

+ - `randombytes_salsa20` has been renamed to `randombytes_internal`.

+ - Support for NativeClient has been removed.

+ - Most `((nonnull))` attributes have been relaxed to allow 0-length inputs

+to be `NULL`.

+ - The `-ftree-vectorize` and `-ftree-slp-vectorize` compiler switches are

+now used, if available, for optimized builds.

+

+* Version 1.0.17-stable

+ - AVX512 detection has been improved.

+ - A compilation option was added to enable retpoline support.

+ - `-ftls-model=global-dynamic` is now set, if available.

+ - Portability and documentation improvements.

 

 * Version 1.0.17

  - Bug fix: `sodium_pad()` didn't properly support block sizes >= 256 bytes.

diff --git a/libs/libsodium/docs/LICENSE b/libs/libsodium/docs/LICENSE
index 365236e9b7..f69e259131 100644
--- a/libs/libsodium/docs/LICENSE
+++ b/libs/libsodium/docs/LICENSE
@@ -1,7 +1,7 @@
 /*

  * ISC License

  *

- * Copyright (c) 2013-2019

+ * Copyright (c) 2013-2024

  * Frank Denis <j at pureftpd dot org>

  *

  * Permission to use, copy, modify, and/or distribute this software for any