加密库 libsodium 1.0.17 发布，Bug 修复版本

  

libsodium 1.0.17 已发布，更新如下：

• Bug fix: sodium_pad() didn't properly support block sizes >= 256 bytes.

• JS/WebAssembly: some old iOS versions can't instantiate the WebAssembly module; fall back to Javascript on these.

• JS/WebAssembly: compatibility with newer Emscripten versions.

• Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't returnEINVAL` on input strings with a short length, unlike their high-level counterpart.

• Added a workaround for Visual Studio 2010 bug causing CPU features not to be detected.

• Portability improvements.

• Test vectors from Project Wycheproof have been added.

• New low-level APIs for arithmetic mod the order of the prime order group:
  crypto_core_ed25519_scalar_random(), crypto_core_ed25519_scalar_reduce(),
  crypto_core_ed25519_scalar_invert(), crypto_core_ed25519_scalar_negate(),
  crypto_core_ed25519_scalar_complement(), crypto_core_ed25519_scalar_add() and crypto_core_ed25519_scalar_sub().

• New low-level APIs for scalar multiplication without clamping: crypto_scalarmult_ed25519_base_noclamp() and crypto_scalarmult_ed25519_noclamp(). These new APIs are especially useful for blinding.

• sodium_sub() has been implemented.

• Support for WatchOS has been added.

• getrandom(2) is now used on FreeBSD 12+.

• The nonnull attribute has been added to all relevant prototypes.

• More reliable AVX512 detection.

• Javascript/Webassembly builds now use dynamic memory growth.

详细更新内容请查看更新日志和 GitHub 发布主页。