Crypto++ 8.9 was released on October 1, 2023. The 8.9 release was a minor, unplanned release. There were no CVEs and one memory error.

The 8.9 release was driven by the fix for ProcessData, and the failures when inString==outString. Also see GH #1231, Rabbit Produces null Keystream When inString == outString.

Release notes

• minor release, recompile of programs required
• expanded community input and support
  • 88 unique contributors as of this release
• add additional tests to datatest.cpp
• fix SIMON128 Asan finding on POWER8
• fix AES/CFB and AES/CTR modes self test failures when using Cryptogams AES on ARMv7
• fix ARIA/CTR mode self test failures when inString==outString
• fix HIGHT/CTR mode self test failures when inString==outString
• fix Rabbit/CTR mode self test failures when inString==outString
• fix HC128/CTR and HC256/CTR mode self test failures when inString==outString
• fix Prime Table and dangling reference to a temporary
• fix Singleton::Ref() when using C++11 memory fences
• remove unneeded call to Crop() in Randomize()