4 See also this page @ref{Новости, on russian}.
11 NNCP builds on NetBSD.
16 @section Release 7.5.0
20 @command{nncp-daemon} is compatible with UCSPI-TCP interface, so log
21 will contain remote side's address (when running under appropriate
22 utility). @option{-ucspi} option should be used instead of @option{-inetd}.
25 @command{nncp-call} can be UCSPI-TCP client, using @option{-ucspi} option.
28 Do not exit if some of MCD network interfaces can not be listened --
34 @section Release 7.4.0
38 Fixed simultaneous @command{nncp-daemon} and @command{nncp-caller} MCD work.
43 @section Release 7.3.2
47 @command{hjson-cli} utility builds in vendor-mode now.
52 @section Release 7.3.1
56 Fixed possibly left opened file descriptor in online commands.
59 Severely decreased memory usage of MTH hashing.
64 @section Release 7.3.0
68 Fixed some workability problems on 32-bit systems with big files.
71 Ability to use directory with a bunch of files as a configuration.
72 @command{nncp-cfgdir} command appeared.
77 @section Release 7.2.1
81 Small optimizations in online commands.
86 @section Release 7.2.0
90 @command{nncp-trns} command appeared for manual transition packets creation.
93 If destination node of transitional packet has non empty @option{via}
94 route, then do not ignore, but use it.
97 Do not relay multicast packet to area message's originator, that
98 obviously has seen its own packet.
101 Much less memory usage during MTH hashing when offset is zero: when
102 packet is not resumed, but for example checked with @command{nncp-check}
108 @section Release 7.1.1
112 Fixed failing directories fsync after @file{.seen} file creation.
117 @section Release 7.1.0
121 Multicasting areas feature appeared. Implemented merely by an additional
122 plain packet type with @command{nncp-toss}, @command{nncp-file} and
123 @command{nncp-exec} commands modification.
126 Fixed workability of @command{nncp-file} and @command{nncp-exec}
127 commands, that use temporary file (stdin and @option{-use-tmp}).
130 Fixed disappearing bad return code in @command{nncp-exec} command.
133 Fixed invalid @file{.hdr} generation when transitional packets are used.
136 @option{-all} option appeared in @command{nncp-rm} command, applying to
137 all the nodes at once.
140 @option{-cycle} option appeared in @command{nncp-check} command, looping
141 the check in infinite cycle.
144 @command{nncp-rm} command can take node alias name.
147 @command{nncp-pkt} can parse @file{.hdr} files.
152 @section Release 7.0.0
156 Minimal required Go version 1.13.
159 Merkle Tree-based Hashing with BLAKE3 (MTH) is used instead of BLAKE2b.
160 Because of that, there are backward @strong{incompatible} changes of
161 encrypted files (everything laying in the spool directory) and
162 @file{.meta} files of chunked transfer.
164 Current implementation is far from being optimal: it lacks
165 parallelizable calculations and has higher memory consumption: nearly
166 512 KiB for each 1 GiB of file's data. Future performance and memory
167 size optimizations should not lead to packet's format change. But it is
168 still several times faster than BLAKE2b.
171 Resumed online downloads, because of MTH, require reading only of the
172 preceding part of file, not the whole one as was before.
175 @command{nncp-hash} utility appeared for calculating file's MTH hash.
178 BLAKE2 KDF and XOF functions are replaced with BLAKE3 in encrypted
179 packets. Lowering number of used primitives. Also, its encrypted
180 packet's header is used as an associated data during encryption.
183 MultiCast Discovery uses
184 @verb{|ff02::4e4e:4350|} address instead of @verb{|ff02::1|}.
187 @command{nncp-cfgenc} mistakenly asked passphrase three times during encryption.
190 @command{nncp-stat} reports about partly downloaded packets.
193 Updated dependencies.
198 @section Release 6.6.0
202 @command{nncp-daemon}, @command{nncp-call} and @command{nncp-caller}
203 commands wait for all background checksummers completion after
204 connection is finished.
207 Added possibility of address determining through multicast announcement
208 in local area network, so called MCD (MultiCast Discovery).
213 @section Release 6.5.0
217 Fixed segfault in @command{nncp-daemon} when SP handshake did not succeed.
220 Fixed possible bad return code ignoring in automatic tosser.
223 Fixed race during file descriptors closing when online protocol call is
224 finished, that could lead to write error of received packet fragment.
227 Kill all packet transmission progress bars in @command{nncp-daemon},
228 @command{nncp-call} and @command{nncp-caller} when call is finished.
233 @section Release 6.4.0
237 Fixed possible race in online protocol, that lead to panic.
242 @section Release 6.3.0
246 Fixed possible panic while showing progress during online protocol.
251 @section Release 6.2.1
255 Three places in logs contained excess @code{%s}.
260 @section Release 6.2.0
264 Returned @command{nncp-caller}'s @option{-autotoss*} options workability.
267 Yet another logging refactoring and simplification.
268 Should be no visible differences to the end user.
273 @section Release 6.1.0
277 Optimization: most commands do not keep opened file descriptors now.
278 Previously you can exceed maximal number of opened files if you have got
279 many packets in the spool directory.
282 Optimization: do not close file descriptor of the file we download
283 online. Previously each chunk lead to expensive open/close calls.
286 Online downloaded files are saved with @file{.nock} (non-checksummed)
287 suffix, waiting either for @command{nncp-check}, or online daemons to
288 perform integrity check.
291 Optimization: files, that are not resumed, are checksummed immediately
292 during the online download, skipping @file{.nock}-intermediate step.
295 Ability to store encrypted packet's header in @file{.hdr} file, close to
296 the packet itself. That can greatly increase performance of packets
297 listing on filesystems with big block's size.
302 @section Release 6.0.0
306 Log uses human readable and easy machine parseable
307 @url{https://www.gnu.org/software/recutils/, recfile} format for the
308 records, instead of structured RFC 3339 lines. Old logs are not readable
309 by @command{nncp-log} anymore.
312 @option{-autotoss*} option workability with @command{nncp-daemon}'s
313 @option{-inetd} mode.
316 Call's @option{when-tx-exists} allows to make a call only when outbound
317 packets exists. Combined with seconds-aware cron expression that can be
318 used as some kind of auto dialler.
321 @command{nncp-cronexpr} command allows you to check validity and
322 expectations of specified cron expression.
327 @section Release 5.6.0
331 @option{-autotoss*} option runs tosser not after the call, but every
332 second while it is active.
335 @option{autotoss}, @option{autotoss-doseen},
336 @option{autotoss-nofile}, @option{autotoss-nofreq},
337 @option{autotoss-noexec}, @option{autotoss-notrns} options available in
338 @option{calls} configuration section. You can configure per-call
339 automatic tosser options.
342 Use vendoring, instead of @env{GOPATH} overriding during tarball
343 installation, because current minimal Go's version is 1.12 and it
349 @section Release 5.5.1
353 Respect for @env{BINDIR}, @env{INFODIR} and @env{DOCDIR} environment
354 variables in @file{config} during installation.
359 @section Release 5.5.0
363 Bugfixes in @command{nncp-call(er)}/@command{nncp-daemon},
364 @command{nncp-bundle} and @command{nncp-stat}.
367 @command{nncp-rm} has @option{-dryrun} and @option{-older} options now.
370 @command{nncp-exec} has @option{-use-tmp} and @option{-nocompress}
371 options now. Uncompressed packets are not compatible with previous NNCP
375 @command{nncp-call}, @command{nncp-caller} and @command{nncp-daemon} commands
376 have @option{-autotoss*} options for running tosser after call is ended.
379 Updated dependencies. Minimal required Go version is 1.12.
384 @section Release 5.4.1
388 Fixed @code{SENDMAIL} variable usage during the build.
393 @section Release 5.4.0
397 Updated dependencies.
400 Build system is moved from Makefiles to @url{http://cr.yp.to/redo.html, redo}.
401 This should not influence package maintainers, because minimal @command{redo}
402 implementation is included in tarball.
407 @section Release 5.3.3
411 More various error checks.
414 Updated dependencies.
419 @section Release 5.3.2
423 Fixed incorrect logic of @option{onlinedeadline} timeout, where
424 connection won't take into account incoming packets events and will
425 forcefully disconnect.
430 @section Release 5.3.1
434 Fixed @option{onlinedeadline} workability with call addresses that use
435 external commands (@verb{#"|somecmd"#}).
438 @command{nncp-stat} has @option{-pkt} option displaying information
439 about each packet in the spool.
444 @section Release 5.3.0
448 Progress messages contain prefix, describing the running action.
451 Fixed not occurring handshake messages padding.
454 Finish all SP protocol related goroutines, less memory leak.
457 SP protocol generates less socket write calls, thus generating less TCP
461 Check @option{onlinedeadline} and @option{maxonlinetime} options every
462 second, independently from socket reads (up to 10 seconds).
465 Once per minute, if no other traffic exists, PING packets are sent in
466 SP-connection. That allows faster determining of connection unworkability.
469 @command{nncp-toss} uses lock-file to prevent simultaneous tossing.
474 @section Release 5.2.1
478 Fixed SP protocol error handling, sometimes causing program panic.
483 @section Release 5.2.0
487 Most commands by default show oneline operations progress.
488 @option{-progress}, @option{-noprogress} command line options,
489 @option{noprogress} configuration file option appeared.
492 Fixed incorrect @command{nncp-check} command return code, that returned
493 bad code when everything is good.
496 Free disk space check during @command{nncp-bundle -rx} call.
501 @section Release 5.1.2
505 @strong{Critical} vulnerability: remote peers authentication could lead
506 to incorrect identification of remote side, allowing foreign encrypted
510 Bugfix: private and public Noise keys were swapped in newly created
511 configuration files, that lead to inability to authenticate online peers.
514 Explicit directories fsync-ing for guaranteed files renaming.
519 @section Release 5.1.1
523 Fixed workability of @command{nncp-file} with @option{-chunked 0} option.
528 @section Release 5.1.0
532 @command{nncp-file} can send directories, automatically creating pax
536 Free disk space is checked during outbound packets creation.
539 @option{freq}, @option{freqminsize}, @option{freqchunked} configuration
540 file options replaced with the structure:
541 @option{freq: @{path: @dots{}, minsize: @dots{}, chunked: @dots{}@}}.
544 Added @option{freq.maxsize} configuration file option, forbidding of
545 freq sending larger than specified size.
548 Ability to notify about successfully executed commands (exec) with
549 @option{notify.exec} configuration file option.
554 @section Release 5.0.0
558 @strong{Incompatible} configuration file format change: YAML is
559 replaced with Hjson, due to its simplicity, without noticeable lack
560 of either functionality or convenience.
563 @strong{Incompatible} plain packet format changes. Older versions are
564 not supported. @code{zlib} compression is replaced with
565 @code{Zstandard}, due to its speed and efficiency, despite library
566 version is not mature enough.
569 Ability to call remote nodes via pipe call of external command, not only
573 @command{nncp-cfgnew} generates configuration file with many
574 comments. @option{-nocomments} option can be used for an old
578 Duplicate filenames have @file{.CTR} suffix, instead of @file{CTR}, to
579 avoid possible collisions with @file{.nncp.chunkCTR}.
582 Ability to override process umask through configuration file option.
585 Files and directories are created with 666/777 permissions by default,
586 allowing control with @command{umask}.
589 Updated dependencies.
592 Full usage of go modules for dependencies management
593 (@code{go.cypherpunks.ru/nncp/v5} namespace is used).
596 Forbid any later GNU GPL version autousage
597 (project's licence now is GNU GPLv3-only).
604 @item Workability on GNU/Linux systems and Go 1.10 is fixed.
612 @strong{Incompatible} encrypted and eblob packet format change: AEAD
613 encryption mode with 128 KiB blocks is used now, because previously
614 @command{nncp-toss} did not verify encrypted packet's MAC before feeding
615 decrypted data to external command. Older versions are not supported.
618 Available free space checking before copying in @command{nncp-xfer},
619 @command{nncp-daemon}, @command{nncp-call(er)}.
622 @command{nncp-call} has ability only to list packets on remote node,
623 without their transmission.
626 @command{nncp-call} has ability to transfer only specified packets.
629 Workability of @option{xxrate} preference in @option{calls}
630 configuration file section.
633 Dependant libraries are updated.
639 Begin using of @code{go.mod} subsystem.
646 @item @command{nncp-daemon} can be run as @command{inetd}-service.
654 @command{nncp-daemon}, @command{nncp-call}, @command{nncp-caller} check
655 if @file{.seen} exists and treat it like file was already downloaded.
656 Possibly it was transferred out-of-bound and remote side needs to be
660 If higher priority packet is spooled, then @command{nncp-daemon} will
661 queue its sending first, interrupting lower priority transmissions.
664 Simple packet rate limiter added to online-related tools
665 (@command{nncp-daemon}, @command{nncp-call}, @command{nncp-caller}).
668 Ability to specify niceness with symbolic notation:
669 @verb{|NORMAL|}, @verb{|BULK+10|}, @verb{|PRIORITY-5|}, etc.
672 Changed default niceness levels:
673 for @command{nncp-exec} from 64 to 96,
674 for @command{nncp-freq} from 64 to 160,
675 for @command{nncp-file} from 196 to 224.
683 @strong{Incompatible} @emph{bundle} archive format changes and
684 @command{nncp-bundle} workability with Go 1.10+. Bundles must be
685 valid tar archives, but Go 1.9 made them invalid because of long paths
686 inside. NNCP accidentally was dependant on that bug. Explicit adding of
687 @file{NNCP/} directory in archive restores workability with valid tar
695 Ability to disable relaying at all using @verb{|-via -|} command line option.
703 @strong{Incompatible} plain packet format changes. Older versions are
707 Ability to queue remote command execution, by configuring @option{exec}
708 option in configuration file and using @command{nncp-exec} command:
711 @command{nncp-mail} command is replaced with more flexible
712 @command{nncp-exec}. Instead of @verb{|nncp-mail NODE RECIPIENT|}
713 you must use @verb{|nncp-exec NODE sendmail RECIPIENT|}.
715 @option{sendmail} configuration file option is replaced with
716 @option{exec}. @verb{|sendmail: [...]|} must be replaced with
717 @verb{|exec: sendmail: [...]|}.
721 Ability to override @option{via} configuration option for destination
722 node via @option{-via} command line option for following commands:
723 @command{nncp-file}, @command{nncp-freq}, @command{nncp-exec}.
726 Chunked files, having size less than specified chunk size, will be sent
727 as an ordinary single file.
730 Exec commands are invoked with additional @env{NNCP_NICE} and
731 @env{NNCP_SELF} environment variables.
734 Files, that are sent as a reply to freq, have niceness level taken from
735 the freq packet. You can set desired niceness during @command{nncp-freq}
736 invocation using @option{-replynice} option.
739 @command{nncp-toss} command can ignore specified packet types during
740 processing: @option{-nofile}, @option{-nofreq}, @option{-noexec},
744 @command{nncp-file} command uses
745 @option{FreqMinSize}/@option{FreqChunked} configuration file options
746 for @option{-minsize}/@option{-chunked} by default. You can turn this
747 off by specifying zero value.
756 @strong{Incompatible} encrypted/eblob packet format changes. Older
757 versions are not supported.
760 Twofish encryption algorithm is replaced with ChaCha20. It is much more
761 faster. One cryptographic primitive less.
764 HKDF-BLAKE2b-256 KDF algorithm is replaced with BLAKE2Xb XOF. Yet
765 another cryptographic primitive less (assuming that BLAKE2X is nearly
766 identical to BLAKE2).
775 @strong{Incompatible} encrypted packet format changes. Older versions
779 @command{nncp-bundle} command can either create stream of encrypted
780 packets, or digest it. It is useful when dealing with
781 @code{stdin}/@code{stdout} based transmission methods (like writing to
782 CD-ROM without intermediate prepared ISO image and working with tape
786 @command{nncp-toss} is able to create @file{.seen} files preventing
787 duplicate packets receiving.
790 Single background checksum verifier worker is allowed in
791 @command{nncp-call}. This is helpful when thousands of small inbound
792 packets could create many goroutines.
795 Ability to override path to spool directory and logfile through either
796 command line argument, or environment variable.
799 @command{nncp-rm} is able to delete outbound/inbound, @file{.seen},
800 @file{.part}, @file{.lock} and temporary files.
805 @section Release 0.12
807 @item Sendmail command is called with @env{NNCP_SENDER} environment variable.
811 @section Release 0.11
813 @item @command{nncp-stat}'s command output is sorted by node name.
817 @section Release 0.10
820 @command{nncp-freq}'s @file{DST} argument is optional now. Last
821 @file{SRC} path's element will be used by default.
828 Fix @option{-rx}/@option{-tx} arguments processing in
829 @command{nncp-call} command. They were ignored.
836 Little bugfix in @command{nncp-file} command, where @option{-minsize}
837 option for unchunked transfer was not in KiBs, but in bytes.
845 Ability to feed @command{nncp-file} from @code{stdin}, that uses an
846 encrypted temporary file for that.
849 Chunked files transmission appeared with corresponding
850 @command{nncp-reass} command and @option{freqchunked} configuration file
851 entry. Useful for transferring big files over small storage devices.
854 @option{freqminsize} configuration file option, analogue to
855 @option{-minsize} one.
858 @command{nncp-xfer}'s @option{-force} option is renamed to
859 @option{-mkdir} for clarity.
862 @option{-minsize} option is specified in KiBs, not bytes, for
866 @command{nncp-newcfg} command is renamed to @command{nncp-cfgnew},
867 and @command{nncp-mincfg} to @command{nncp-cfgmin} -- now they have
868 common prefix and are grouped together for convenience.
871 @command{nncp-cfgenc} command appeared, allowing configuration file
872 encryption/decryption, for keeping it safe without any either OpenPGP or
876 Cryptographic libraries (dependencies) are updated.
883 @item Small @command{nncp-rm} command appeared.
884 @item Cryptographic libraries (dependencies) are updated.
891 Trivial small fix in default niceness level of @command{nncp-file}
892 and @command{nncp-freq} commands.
900 Small fix in @command{nncp-call}, @command{nncp-caller},
901 @command{nncp-daemon}: they can segmentation fail sometimes (no data is
905 @command{nncp-newnode} renamed to @command{nncp-newcfg} -- it is shorter
906 and more convenient to use.
909 @command{nncp-mincfg} command appeared: helper allowing to create
910 minimalistic stripped down configuration file without private keys, that
911 is useful during @command{nncp-xfer} usage.
918 @item Fixed compatibility with Go 1.6.
926 @strong{Incompatible} packet's format change (magic number is changed
927 too): size field is encrypted and is not send in plaintext anymore.
930 @option{-minsize} option gives ability to automatically pad outgoing
931 packets to specified minimal size.
934 @command{nncp-daemon} and @command{nncp-call}/@command{nncp-caller}
935 always check new @emph{tx} packets appearance in the background while
936 connected. Remote side is immediately notified.
939 @option{-onlinedeadline} option gives ability to configure timeout of
940 inactivity of online connection, when it could be disconnected. It could
941 be used to keep connection alive for a long time.
944 @option{-maxonlinetime} option gives ability to set maximal allowable
945 online connection aliveness time.
948 @command{nncp-caller} command appeared: cron-ed TCP daemon caller.
951 @command{nncp-pkt} command can decompress the data.