Beyond Linux® From Scratch - Version 7.8

Chapter 4. Security

Nettle-3.1.1

Introduction to Nettle

The Nettle package contains the low-level cryptographic library that is designed to fit easily in many contexts.

This package is known to build and work properly using an LFS-7.8 platform.

Package Information

Nettle Dependencies

Optional

OpenSSL-1.0.2d (for examples)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nettle

Installation of Nettle

Install Nettle by running the following commands: 

./configure --prefix=/usr &&
make

To test the results, issue: make check.

If you want to disable installing the static library, use this sed: 

sed -i '/^install-here/ s/ install-static//' Makefile

Now, as the root user: 

make install &&
chmod   -v   755 /usr/lib/lib{hogweed,nettle}.so &&
install -v -m755 -d /usr/share/doc/nettle-3.1.1  &&
install -v -m644 nettle.html /usr/share/doc/nettle-3.1.1

Contents

Installed Programs: nettle-hash, nettle-lfib-stream, nettle-pbkdf2, pkcs1-conv and sexp-conv
Installed Libraries: libhogweed.{so,a} and libnettle.{so,a}
Installed Directory: /usr/include/nettle and /usr/share/doc/nettle-3.1.1

Short Descriptions

nettle-hash

calulates a hash value using a specified algorithm.

nettle-lfib-stream

outputs a sequence of pseudorandom (non-cryptographic) bytes, using Knuth's lagged fibonacci generator. The stream is useful for testing, but should not be used to generate cryptographic keys or anything else that needs real randomness.

nettle-pbkdf2

password-based key derivation function that take as input a password or passphrase and typically strengthen it and protect against certain pre-computation attacks by using salting and expensive computation.

pkcs1-conv

converts private and public RSA keys from PKCS #1 format to sexp format.

sexp-conv

converts an s-expression to a different encoding.

Last updated on 2015-09-20 15:38:20 -0700