Update SCOSSL and SymCrypt

SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "SymCrypt-OpenSSL-1.6.1.tar.gz": "8766d2f5c977960b1aab0099c0d74190b0705bc29f29ff4b266dac3729644658"
+    "SymCrypt-OpenSSL-1.7.0.tar.gz": "5c89fdea6d1b9523856ebf875a973eb5f0e598aa95ad8b7fbfc819b5cc5161df"
   }
 }

SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec

@@ -1,6 +1,6 @@
 Summary:        The SymCrypt engine for OpenSSL (SCOSSL) allows the use of OpenSSL with SymCrypt as the provider for core cryptographic operations
 Name:           SymCrypt-OpenSSL
-Version:        1.6.1
+Version:        1.7.0
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -36,6 +36,7 @@ The SymCrypt engine for OpenSSL (SCOSSL) allows the use of OpenSSL with SymCrypt
 mkdir bin; cd bin
 
 cmake   .. \
+        -DKEYSINUSE_ENABLED=1 \
         -DOPENSSL_ROOT_DIR="%{_prefix}/local/ssl" \
         -DSYMCRYPT_ROOT_DIR=%{buildroot}%{_includedir}/.. \
         -DCMAKE_TOOLCHAIN_FILE="../cmake-toolchain/LinuxUserMode-%{symcrypt_arch}.cmake" \
@@ -67,6 +68,10 @@ install SymCryptProvider/symcrypt_prov.cnf %{buildroot}%{_sysconfdir}/pki/tls/sy
 %{_sysconfdir}/pki/tls/symcrypt_prov.cnf
 
 %changelog
+* Thu Jan 30 2025 Maxwell Moyer-McKee <[email protected]> - 1.7.0-1
+- Add optional debug logging instead of writing some errors to stderr
+- Add optional KeysInUse feature, which can be turned on by config
+
 * Wed Nov 27 2024 CBL-Mariner Servicing Account <[email protected]> - 1.6.1-1
 - Auto-upgrade to 1.6.1 - bug fixes
 

SPECS/SymCrypt/SymCrypt.signatures.json

@@ -1,8 +1,8 @@
 {
  "Signatures": {
-  "SymCrypt-103.6.0.tar.gz": "ce03f03cfea76c38336c67f175ca316f0377b98e2617a3561e0a2dc91114e9ee",
+  "SymCrypt-103.8.0.tar.gz": "cd6dbce1c964805192bf2bd7e3b8ef3deb894d3072cecdf904fb4fb3fd078b72",
   "find-debuginfo": "356800f19b755879993103c121c83fb4cc97d0e8656ea34d051daa310f54cedf",
   "jitterentropy-library-3.3.1.tar.gz": "4a50cb02b4836cd5550016e2fc2263e6982abaa11467a9e1cea260c1c2f7d487",
-  "symcrypt-build-environment-variables-v103.6.0.sh": "860e849274bd742c752df74baa3fe9502101f53d43b3a72463a2ffb122221296"
+  "symcrypt-build-environment-variables-v103.8.0.sh": "4e19f55745c0d8a4e22455b52c99c33444dd5e80864d49d5eb2e3edaeff2e7d3"
  }
 }

SPECS/SymCrypt/SymCrypt.spec

@@ -1,6 +1,6 @@
 Summary:        A core cryptographic library written by Microsoft
 Name:           SymCrypt
-Version:        103.6.0
+Version:        103.8.0
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -103,6 +103,10 @@ chmod 755 %{buildroot}%{_libdir}/libsymcrypt.so.%{version}
 %{_includedir}/*
 
 %changelog
+* Thu Jan 30 2025 Maxwell Moyer-McKee <[email protected]> - 103.8.0-1
+- Add FIPS approved services indicator
+- Add ML-DSA implementation
+
 * Mon Nov 25 2024 Tobias Brick <[email protected]> - 103.6.0-1
 - Upgrde to 103.6.0
 

SPECS/SymCrypt/symcrypt-build-environment-variables-v103.8.0.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Generated by 'generate-env-file.sh'
+export SYMCRYPT_BRANCH=main
+export SYMCRYPT_COMMIT_HASH=53be637
+export SYMCRYPT_COMMIT_TIMESTAMP=2025-01-28T00:44:15+00:00

cgmanifest.json

@@ -28416,8 +28416,8 @@
         "type": "other",
         "other": {
           "name": "SymCrypt",
-          "version": "103.6.0",
-          "downloadUrl": "https://github.com/microsoft/SymCrypt/archive/v103.6.0.tar.gz"
+          "version": "103.8.0",
+          "downloadUrl": "https://github.com/microsoft/SymCrypt/archive/v103.8.0.tar.gz"
         }
       }
     },
@@ -28426,8 +28426,8 @@
         "type": "other",
         "other": {
           "name": "SymCrypt-OpenSSL",
-          "version": "1.6.1",
-          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.6.1.tar.gz"
+          "version": "1.7.0",
+          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.7.0.tar.gz"
         }
       }
     },