headers
Werner Koch | 8 May 12:39
Picon
Favicon

nPth - The New GNU Portable Threads Library

Hi!

We are pleased to announce the first tarball release of the
New GNU Portable Threads Library: nPth version 0.90.

nPth is a non-preemptive threads implementation using an API very similar
to the one known from GNU Pth.  It has been designed as a replacement of
GNU Pth for non-ancient operating systems.  In contrast to GNU Pth is is
based on the system's standard threads implementation.  Thus nPth allows
the use of libraries which are not compatible to GNU Pth.

GNU Pth is often used to provide a co-routine based framework.  GnuPG-2
makes heavy use of this concept for good audibility, general security
concerns, and ease of implementation.  However, GNU Pth has the drawback
that ugly hacks are required to work with libraries which are not GNU
Pth aware.

The nPth tarball and its signature are available as

  ftp://ftp.gnupg.org/gcrypt/npth/npth-0.90.tar.bz2
  ftp://ftp.gnupg.org/gcrypt/npth/npth-0.90.tar.bz2.sig

and at all GnuPG mirrors.  See the included README file and the npth.h
header for documentation.  Bug reports and requests for help should be
send to the gnupg-devel mailing list at gnupg.org.  nPth is available
under the terms of the LGPLv3+ or the GPLv2+.  The GIT repository is at
git://git.gnupg.org/npth.git .

The current development version of GnuPG (2.1) has already been migrated
to nPth and thus the next beta release will require it.  Obviously we
(Continue reading)

Permalink | Reply | 0 comments |
headers
Werner Koch | 27 Mar 11:20
Picon
Favicon

GnuPG 2.0.19 released

Hello!

We are pleased to announce the availability of a new stable GnuPG-2
release:  Version 2.0.19.

The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage.  It can be used to encrypt data, create digital
signatures, help authenticating using Secure Shell and to provide a
framework for public key cryptography.  It includes an advanced key
management facility and is compliant with the OpenPGP and S/MIME
standards.

GnuPG-2 has a different architecture than GnuPG-1 (e.g. 1.4.12) in
that it splits up functionality into several modules.  However, both
versions may be installed alongside without any conflict.  In fact,
the gpg version from GnuPG-1 is able to make use of the gpg-agent as
included in GnuPG-2 and allows for seamless passphrase caching.  The
advantage of GnuPG-1 is its smaller size and the lack of dependency on
other modules at run and build time.  We will keep maintaining GnuPG-1
versions because they are very useful for small systems and for server
based applications requiring only OpenPGP support.

GnuPG is distributed under the terms of the GNU General Public License
(GPLv3+).  GnuPG-2 works best on GNU/Linux and *BSD systems but is
also available for other Unices, Microsoft Windows and Mac OS X.

What's New in 2.0.19
====================

 * GPG now accepts a space separated fingerprint as a user ID.  This
(Continue reading)

Permalink | Reply | 1 comment |
headers
Werner Koch | 30 Jan 17:36
Picon
Favicon

GnuPG 1.4.12 released

Hello!

We are pleased to announce the availability of a new stable GnuPG-1
release: Version 1.4.12.  

The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage.  It is a complete and free replacement of PGP and
can be used to encrypt data and to create digital signatures.  It
includes an advanced key management facility, smartcard support and is
compliant with the OpenPGP Internet standard as described by RFC-4880.

Note that this version is from the GnuPG-1 series and thus smaller than
those from the GnuPG-2 series, easier to build and also better portable
to ancient platforms.  In contrast to GnuPG-2 (e.g version 2.0.18) it
comes with no support for S/MIME, Secure Shell, or other tools useful
for desktop environments.  Fortunately you may install both versions
alongside on the same system without any conflict.

What's New
===========

    * GPG now accepts a space separated fingerprint as a user ID.
      This allows to copy and paste the fingerprint from the key
      listing.

    * Removed support for the original HKP keyserver which is not
      anymore used by any site.

    * Rebuild the trustdb after changing the option --min-cert-level.
(Continue reading)

Permalink | Reply | 2 comments |
headers
Werner Koch | 4 Aug 18:16
Picon
Favicon

GnuPG 2.0.18 released

Hello!

We are pleased to announce the availability of a new stable GnuPG-2
release:  Version 2.0.18.

The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage.  It can be used to encrypt data, create digital
signatures, help authenticating using Secure Shell and to provide a
framework for public key cryptography.  It includes an advanced key
management facility and is compliant with the OpenPGP and S/MIME
standards.

GnuPG-2 has a different architecture than GnuPG-1 (e.g. 1.4.11) in
that it splits up functionality into several modules.  However, both
versions may be installed alongside without any conflict.  In fact,
the gpg version from GnuPG-1 is able to make use of the gpg-agent as
included in GnuPG-2 and allows for seamless passphrase caching.  The
advantage of GnuPG-1 is its smaller size and the lack of dependency on
other modules at run and build time.  We will keep maintaining GnuPG-1
versions because they are very useful for small systems and for server
based applications requiring only OpenPGP support.

GnuPG is distributed under the terms of the GNU General Public License
(GPLv3+).  GnuPG-2 works best on GNU/Linux and *BSD systems but is
also available for other Unices, Microsoft Windows and Mac OS X.

What's New
===========

 * Bug fix for newer versions of Libgcrypt.
(Continue reading)

Permalink | Reply | 1 comment |
headers
Marcus Brinkmann | 16 Jun 17:54

libassuan 2.0.2 released

Hi,

libassuan 2.0.2 is a minor release of libassuan.  It provides a
shared library which is a dependency of of the upcoming versions of GPGME,
GnupG 2.1.x and others.

  ftp://ftp.gnupg.org/gcrypt/libassuan/libassuan-2.0.2.tar.bz2
  ftp://ftp.gnupg.org/gcrypt/libassuan/libassuan-2.0.2.tar.bz2.sig

The sha1sums of these files are:

e843fd96b4cb05eb737e465891034229f50469d4  libassuan-2.0.1-2.0.2.diff.bz2
dbcd96e2525d4c3a2da9e8054a06fa517f20a185  libassuan-2.0.2.tar.bz2
74b09f626c67ffe51ba21a38b7bed0ea35112c6b  libassuan-2.0.2.tar.bz2.asc

Noteworthy changes in version 2.0.2 (2010-06-16)
------------------------------------------------

 * A new flag may now be used to convey comments via assuan_transact.

 * A new flag value may now be used to disable logging.

 * The gpgcedev.c driver now provides a log device.

 * It is now possible to overwrite socket and connect functions in
   struct assuan_system_hooks.

 * Interface changes relative to the 2.0.1 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 ASSUAN_CONVEY_COMMENTS   NEW.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Marcus Brinkmann | 16 Jun 17:56

GPGME 1.3.1 released

Hi,

We are pleased to announce version 1.3.1 of GnuPG Made Easy,
a library designed to make access to GnuPG easier for applications.
It may be found in the file

ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.3.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.3.1.tar.bz2.sig

It should soon appear on the mirrors listed at:
http://www.gnupg.org/mirrors.html

Bug reports and requests for assistance should be sent to:
gnupg-devel <at> gnupg.org

The sha1sum checksums for this distibution are
7d19a95a2239da13764dad7f97541be884ec5a37  gpgme-1.3.1.tar.bz2
93316a81a8f903c5b604716b6937884ea7b0917a  gpgme-1.3.1.tar.bz2.sig

Noteworthy changes in version 1.3.1 (2011-06-16)
------------------------------------------------

 * Ported to Windows CE.

 * Detect GPG versions not supporting ---passwd.

 * Interface changes relative to the 1.3.0 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 GPGME_EXPORT_MODE_MINIMAL      NEW
 GPGME_STATUS_SUCCESS           NEW
(Continue reading)

Permalink | Reply | 0 comments |
headers
Marcus Brinkmann | 4 Jul 19:06
Picon
Favicon

GPGME 1.3.1 released

Hi,

We are pleased to announce version 1.3.1 of GnuPG Made Easy,
a library designed to make access to GnuPG easier for applications.
It may be found in the file

ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.3.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.3.1.tar.bz2.sig

It should soon appear on the mirrors listed at:
http://www.gnupg.org/mirrors.html

Bug reports and requests for assistance should be sent to:
gnupg-devel <at> gnupg.org

The sha1sum checksums for this distibution are
7d19a95a2239da13764dad7f97541be884ec5a37  gpgme-1.3.1.tar.bz2
93316a81a8f903c5b604716b6937884ea7b0917a  gpgme-1.3.1.tar.bz2.sig

Noteworthy changes in version 1.3.1 (2011-06-16)
------------------------------------------------

 * Ported to Windows CE.

 * Detect GPG versions not supporting ---passwd.

 * Interface changes relative to the 1.3.0 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 GPGME_EXPORT_MODE_MINIMAL      NEW
 GPGME_STATUS_SUCCESS           NEW
(Continue reading)

Permalink | Reply | 0 comments |
headers
Marcus Brinkmann | 4 Jul 19:05
Picon
Favicon

libassuan 2.0.2 released

Hi,

libassuan 2.0.2 is a minor release of libassuan.  It provides a
shared library which is a dependency of of the upcoming versions of GPGME,
GnupG 2.1.x and others.

  ftp://ftp.gnupg.org/gcrypt/libassuan/libassuan-2.0.2.tar.bz2
  ftp://ftp.gnupg.org/gcrypt/libassuan/libassuan-2.0.2.tar.bz2.sig

The sha1sums of these files are:

e843fd96b4cb05eb737e465891034229f50469d4  libassuan-2.0.1-2.0.2.diff.bz2
dbcd96e2525d4c3a2da9e8054a06fa517f20a185  libassuan-2.0.2.tar.bz2
74b09f626c67ffe51ba21a38b7bed0ea35112c6b  libassuan-2.0.2.tar.bz2.asc

Noteworthy changes in version 2.0.2 (2010-06-16)
------------------------------------------------

 * A new flag may now be used to convey comments via assuan_transact.

 * A new flag value may now be used to disable logging.

 * The gpgcedev.c driver now provides a log device.

 * It is now possible to overwrite socket and connect functions in
   struct assuan_system_hooks.

 * Interface changes relative to the 2.0.1 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 ASSUAN_CONVEY_COMMENTS   NEW.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Werner Koch | 29 Jun 12:18
Picon
Favicon

Libgcrypt 1.5.0 released

Hello! 

The GNU project is pleased to announce the availability of Libgcrypt
version 1.5.0.  This is the new stable version of Libgcrypt and upward
compatible with the 1.4 series.

The 1.4 series will enter end of life state on 2012-12-31.

Libgcrypt is a general purpose library of cryptographic building
blocks.  It is originally based on code used by GnuPG.  It does not
provide any implementation of OpenPGP or other protocols.  Thorough
understanding of applied cryptography is required to use Libgcrypt.

Noteworthy changes between version 1.4.6 and 1.5.0:

 * New function gcry_kdf_derive implementing OpenPGP S2K algorithms
   and PBKDF2.

 * Support for WindowsCE.

 * Support for ECDH.

 * Support for OAEP and PSS methods as described by RFC-3447.

 * Fixed PKCS v1.5 code to always return the leading zero.

 * New format specifiers "%M" and "%u" for gcry_sexp_build.

 * Support opaque MPIs with "%m" and "%M" in gcry_sexp_build.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Werner Koch | 1 Mar 15:02
Picon
Favicon

Libksba 1.2.0 released

Hello!

We are pleased to announce version 1.2.0 of Libksba.

Libksba is an X.509 and CMS (PKCS#7) library.  It is for example
required to build the S/MIME part of GnuPG-2 (gpgsm).  The only build
requirement for Libksba itself is the libgpg-error package.  There are
no other dependencies; actual cryptographic operations need to be done
by the user.  Libksba is distributed under the GPLv3+.  There are no
user tools accompanying this software, thus it is mostly relevant to
developers.

This release adds features required by the GnuPG 2.1 development
version.

You may download the library and its OpenPGP signature from:

  ftp://ftp.gnupg.org/gcrypt/libksba/libksba-1.2.0.tar.bz2 (575k)
  ftp://ftp.gnupg.org/gcrypt/libksba/libksba-1.2.0.tar.bz2.sig

Noteworthy changes in version 1.2.0 (2011-03-01)
------------------------------------------------

 * New functions to allow the creation of X.509 certificates.

 * Interface changes relative to the 1.1.0 release:
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 ksba_certreq_set_serial          NEW.
 ksba_certreq_set_issuer          NEW.
 ksba_certreq_set_validity        NEW.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Werner Koch | 13 Jan 17:08
Picon
Favicon

GnuPG 2.0.17 released

Hello!

We are pleased to announce the availability of a new stable GnuPG-2
release:  Version 2.0.17.

The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage.  It can be used to encrypt data, create digital
signatures, help authenticating using Secure Shell and to provide a
framework for public key cryptography.  It includes an advanced key
management facility and is compliant with the OpenPGP and S/MIME
standards.

GnuPG-2 has a different architecture than GnuPG-1 (e.g. 1.4.11) in
that it splits up functionality into several modules.  However, both
versions may be installed alongside without any conflict.  In fact,
the gpg version from GnuPG-1 is able to make use of the gpg-agent as
included in GnuPG-2 and allows for seamless passphrase caching.  The
advantage of GnuPG-1 is its smaller size and the lack of dependency on
other modules at run and build time.  We will keep maintaining GnuPG-1
versions because they are very useful for small systems and for server
based applications requiring only OpenPGP support.

GnuPG is distributed under the terms of the GNU General Public License
(GPL version 3).  GnuPG-2 works best on GNU/Linux or *BSD systems.

What's New
===========

 * Allow more hash algorithms with the OpenPGP v2 card.
(Continue reading)

Permalink | Reply | 0 comments |

Gmane