1.119. libgcrypt

Updated libgcrypt packages that contain enhancements necessary for FIPS validation are now available.

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

This updated package rebases the libgcrypt library to version 1.4.4, the current upstream version. This rebase adds the following enhancements:

runtime self-tests and FIPS mode setting have been added, both of which are necessary for Federal Information Processing Standards level 1 (FIPS 140-2) validation. Note: libgcrypt 1.4.4 is currently undergoing FIPS-140-2 validation. FIPS mode is disabled by default, however, to ensure the libgcrypt library maintains feature parity and ABI compatibility with libgcrypt packages previously included in Red Hat Enterprise Linux 5. The FIPS mode can be enabled with kernel command line setting or by creating an empty file, /etc/gcrypt/fips_enabled. (BZ#444803)
libgcrypt now works with gnutls in non-enforced FIPS mode. (BZ#462718)

libgcrypt users are advised to upgrade to the updated packages, which provides these enhancements.