contrib/crypto++/.signature

untrusted comment: verify with /etc/ports/contrib.pub
RWSagIOpLGJF3zt91CFRdDDBwKuFMTJkU5ly2GEBhMYyLQdNGkr6P2rjA7O0WoyGWv9SzGtMbUbbykTGltYQslVT+r+giYhxUQI=
SHA256 (Pkgfile) = bb1345fb0769f0006f614abb65739e562a4400e1eef8cb90ad3c3662ac88a5fb
SHA256 (.footprint) = bb802f25fc40dde765471d18343ca1406de088fb804937929353c98b0d395ccc
SHA256 (cryptopp860.zip) = 20aa413957d9c8ae353ee2f7747bd7ac392f933c60a53e3fd1e41cadbc48d193
updated signatures 2016-11-06 23:36:42 +01:00			`untrusted comment: verify with /etc/ports/contrib.pub`
[notify] crypto++: 8.5.0 -> 8.6.0 security update CVE-2021-40530 plaintext recovery attack on OpenPGP ciphertexts encrypted with ElGamal. Only certain combinations of sender and receiver software are exposed. We found that GPG (via Libgcrypt) and Crypto++ are affected when acting as sender, while Go is not. https://ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1#faq 2021-09-25 10:44:41 +10:00			`RWSagIOpLGJF3zt91CFRdDDBwKuFMTJkU5ly2GEBhMYyLQdNGkr6P2rjA7O0WoyGWv9SzGtMbUbbykTGltYQslVT+r+giYhxUQI=`
			`SHA256 (Pkgfile) = bb1345fb0769f0006f614abb65739e562a4400e1eef8cb90ad3c3662ac88a5fb`
			`SHA256 (.footprint) = bb802f25fc40dde765471d18343ca1406de088fb804937929353c98b0d395ccc`
			`SHA256 (cryptopp860.zip) = 20aa413957d9c8ae353ee2f7747bd7ac392f933c60a53e3fd1e41cadbc48d193`