[gnutls-help] nettle_cfb8_decrypt and nettle 5.1

[Andreas Metzler]

On 2019-12-10 Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote:
> On Sat, Dec 7, 2019 at 2:26 PM Andreas Metzler <ametzler at bebt.de> wrote:

> > gnutls 3.6.11 introduces this change in
> > 98ac6220bdef67ba1153dc515613e4582e1419a2 "nettle: use included CFB8
> > implementation if nettle is 3.5":
> >
> > configure.ac
> >  # Check if nettle has CFB8 support
> > +if test -z "$ac_cv_func_nettle_cfb8_encrypt"; then
> > +       # nettle_cfb8_decrypt in nettle 3.5 is known to be broken
> > +       ver=`$PKG_CONFIG --modversion nettle`
> > +       if expr "$ver" : '^3\.5\b' >/dev/null; then
> > +               ac_cv_func_nettle_cfb8_encrypt=no
> > +       fi
> > +fi

> > Which versions of nettle are broken? Is there a fixed release?
> > The "expr" test hits not only for 3.5 but also for 3.5.1.

> I believe it is every released version of nettle which includes cfb8.
> I think the 3.5.x match is intentional as the .1 releases in nettle
> are made only for targeted fixes and may not include the cfb8 fix.

Hello,

okay. I was asking because 3.5.1 /was/ released. But as you suspected
there is no cf8 change included.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'