++2021-07-24 Niels Möller <nisse@lysator.liu.se>
++
++ Merged s390x code.
++
++ GCM and fat build support for s390x, contributed by Mamone Tarsha:
++ * s390x/machine.m4: New file.
++ * s390x/msa_x4/gcm-hash.asm: New file.
++ * fat-s390x.c: New file.
++ * s390x/fat/cpu-facility.asm: New file.
++ * s390x/fat/: New wrapper files for aes and gcm assembly.
++
+ 2021-07-21 Niels Möller <nisse@lysator.liu.se>
+
+ * Makefile.in (OPT_SOURCES): Add fat-s390x.c.
+
+ 2021-05-09 Niels Möller <nisse@lysator.liu.se>
+
+ Implementation of AES using s390x "message security assist"
+ extensions. Contributed by Mamone Tarsha:
+ * s390x/msa_x1/aes128-decrypt.asm: New file.
+ * s390x/msa_x1/aes128-encrypt.asm: New file.
+ * s390x/msa_x1/aes128-set-decrypt-key.asm: New file.
+ * s390x/msa_x1/aes128-set-encrypt-key.asm: New file.
+ * s390x/msa_x2/aes192-decrypt.asm: New file.
+ * s390x/msa_x2/aes192-encrypt.asm: New file.
+ * s390x/msa_x2/aes192-set-decrypt-key.asm: New file.
+ * s390x/msa_x2/aes192-set-encrypt-key.asm: New file.
+ * s390x/msa_x2/aes256-decrypt.asm: New file.
+ * s390x/msa_x2/aes256-encrypt.asm: New file.
+ * s390x/msa_x2/aes256-set-decrypt-key.asm: New file.
+ * s390x/msa_x2/aes256-set-encrypt-key.asm: New file.
+ * configure.ac: Renamed option to --enable-s390x-msa. Enables both
+ mas_x1 and msa_x2.
+ (asm_replace_list): Add more aes files.
+ * Makefile.in (distdir): Add s390x/msa_x1 s390x/msa_x2 directories.
+
+ 2021-04-01 Niels Möller <nisse@lysator.liu.se>
+
+ Move aes128_encrypt and similar functions to their own files. To
+ make it easier for assembly implementations to override specific
+ AES variants.
+ * aes-decrypt.c: Split file, keep only legacy function aes_decrypt here.
+ * aes-decrypt-table.c (_nettle_aes_decrypt_table): New file, moved
+ table here.
+ * aes128-decrypt.c (aes128_decrypt): New file, moved function here.
+ * aes192-decrypt.c (aes192_decrypt): New file, moved function here.
+ * aes256-decrypt.c (aes256_decrypt): New file, moved function here.
+ * aes-encrypt.c: Split file, keep only legacy function aes_encrypt here.
+ * aes128-encrypt.c (aes128_encrypt): New file, moved function here.
+ * aes192-encrypt.c (aes192_encrypt): New file, moved function here.
+ * aes256-encrypt.c (aes256_encrypt): New file, moved function here.
+ * Makefile.in (nettle_SOURCES): Add new files.
+
+ 2021-03-28 Niels Möller <nisse@lysator.liu.se>
+
+ Initial config for s390x, contributed by Mamone Tarsha.
+ * configure.ac: Add flag --enable-s390x-msa-x1. Add ABI check for
+ s390x, and setup asm_path.
+ * Makefile.in (distdir): Add s390x directory.
+ * s390x/README: New file
+
+2021-07-08 Niels Möller <nisse@lysator.liu.se>
+
+ * configure.ac (FAT_TEST_LIST): Add sha2 to aarch64 fat tests.
+
+ From Mamone Tarsha:
+ * arm64/fat/sha256-compress-2.asm: New file.
+ * arm64/crypto/sha256-compress.asm: New file.
+ * fat-arm64.c: Add setup for nettle_sha1_compress.
+
+2021-06-30 Niels Möller <nisse@lysator.liu.se>
+
+ * configure.ac (FAT_TEST_LIST): Add sha1 to aarch64 fat tests.
+
+ From Mamone Tarsha:
+ * fat-arm64.c: Add setup for nettle_sha1_compress.
+ * arm64/fat/sha1-compress-2.asm: New file.
+
+2021-06-01 Niels Möller <nisse@lysator.liu.se>
+
+ From Mamone Tarsha:
+ * arm64/crypto/sha1-compress.asm: New file.
+
+2021-05-17 Niels Möller <nisse@lysator.liu.se>
+
+ Bug fixes merged from from 3.7.3 release (starting from 2021-05-06).
+ * rsa-decrypt-tr.c (rsa_decrypt_tr): Check up-front that input is
+ in range.
+ * rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
+ * rsa-decrypt.c (rsa_decrypt): Likewise.
+ * testsuite/rsa-encrypt-test.c (test_main): Add tests with input > n.
+
+2021-05-14 Niels Möller <nisse@lysator.liu.se>
+
+ * rsa-sign-tr.c (rsa_sec_blind): Delete mn argument.
+ (_rsa_sec_compute_root_tr): Delete mn argument, instead require
+ that input size matches key size. Rearrange use of temporary
+ storage, to support in-place operation, x == m. Update all
+ callers.
+
+ * rsa-decrypt-tr.c (rsa_decrypt_tr): Make zero-padded copy of
+ input, for calling _rsa_sec_compute_root_tr.
+ * rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
+
+ * testsuite/rsa-encrypt-test.c (test_main): Test calling all of
+ rsa_decrypt, rsa_decrypt_tr, and rsa_sec_decrypt with zero input.
+
+2021-05-06 Niels Möller <nisse@lysator.liu.se>
+
+ * pkcs1-sec-decrypt.c (_pkcs1_sec_decrypt): Check that message
+ length is valid, for given key size.
+ * testsuite/rsa-sec-decrypt-test.c (test_main): Add test cases for
+ calls to rsa_sec_decrypt specifying a too large message length.
+
+2021-05-23 Niels Möller <nisse@lysator.liu.se>
+
+ From Nicolas Mora: Implement aes key wrap and key unwrap (RFC 3394).
+ * nist-keywrap.c (bswap_if_le, nist_keywrap16, nist_keyunwrap16)
+ (aes128_keywrap, aes192_keywrap, aes256_keywrap)
+ (aes128_keyunwrap, aes192_keyunwrap, aes256_keyunwrap): New file,
+ new functions.
+ * nist-keywrap.h: New header file.
+ * Makefile.in (nettle_SOURCES): Add nist-keywrap.c.
+ (HEADERS): Add nist-keywrap.h.
+ * testsuite/aes-keywrap-test.c (test_main): New tests.
+ * testsuite/Makefile.in (TS_NETTLE_SOURCES): Add aes-keywrap-test.c.
+
+2021-04-13 Niels Möller <nisse@lysator.liu.se>
+
+ * powerpc64/p8/aes-encrypt-internal.asm (SWAP_MASK): Change macro
+ name to use all uppercase.
+ * powerpc64/p8/aes-decrypt-internal.asm (SWAP_MASK): Likewise.
+
+2021-04-11 Niels Möller <nisse@lysator.liu.se>
+
+ * config.guess: Update to 2021-01-25 version, from savannah's
+ config.git. Needed to recognize M1 Macs.
+ * config.sub: Similarly update to 2021-03-10 version.
+
2021-03-24 Niels Möller <nisse@lysator.liu.se>
* .gitlab-ci.yml: Add remote tests for s390x.