Zirconium Linux From Scratch - Version r12.4-45-systemd

Chapter 11. Post Networking, Compilers and Markup Language

Nettle-3.10.2

Introduction to Nettle

The Nettle package contains a low-level cryptographic library that is designed to fit easily in many contexts.

This package is known to build and work properly using an LFS 12.4 platform.

Package Information

  • Download (HTTP): https://mirror.csclub.uwaterloo.ca/gnu/nettle/nettle-3.10.2.tar.gz

  • Download SHA256 Sum: fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5

  • Download MD5 sum: b28bcbf6f045ff007940a9401673600d

  • Download size: 2.5 MB

  • Estimated disk space required: 102 MB (with tests)

  • Estimated build time: 0.2 SBU (with tests; both using parallelism=4)

Nettle Dependencies

Optional

"valgrind" (optional for the tests)

Installation of Nettle

Prepare Nettle by running the following commands: 

./configure --prefix=/usr --disable-static

To build Nettle, issue: 

make

To test the results, issue: 

make check

Now Install, as the root user: 

make install
chmod   -v   755 /usr/lib/lib{hogweed,nettle}.so
install -v -m755 -d /usr/share/doc/nettle-3.10.2
install -v -m644 nettle.{html,pdf} /usr/share/doc/nettle-3.10.2

Contents

Installed Programs: nettle-hash, nettle-lfib-stream, nettle-pbkdf2, pkcs1-conv and sexp-conv
Installed Libraries: libhogweed.so and libnettle.so
Installed Directory: /usr/include/nettle and /usr/share/doc/nettle-3.10.2

Short Descriptions

nettle-hash

calculates a hash value using a specified algorithm

nettle-lfib-stream

outputs a sequence of pseudorandom (non-cryptographic) bytes, using Knuth's lagged fibonacci generator. The stream is useful for testing, but should not be used to generate cryptographic keys or anything else that needs real randomness

nettle-pbkdf2

is a password-based key derivation function that takes a password or a passphrase as input and returns a strengthened password, which is protected against pre-computation attacks by using salting and other expensive computations.

pkcs1-conv

converts private and public RSA keys from PKCS #1 format to sexp format

sexp-conv

converts an s-expression to a different encoding