What's Changed

• Use OPENSSL_STATIC_ASSERT which handles all the platform/compiler/C s… by @andrewhop in Use OPENSSL_STATIC_ASSERT which handles all the platform/compiler/C s… #1791
• ML-KEM refactor by @dkostic in ML-KEM refactor #1763
• ML-KEM-IPD to ML-KEM as defined in FIPS 203 by @dkostic in ML-KEM-IPD to ML-KEM as defined in FIPS 203 #1796
• Add KDA OneStep testing to ACVP by @skmcgrail in Add KDA OneStep testing to ACVP #1792
• Updating erroneous documentation for BIO_get_mem_data and subsequent usage by @smittals2 in Updating erroneous documentation for BIO_get_mem_data and subsequent usage #1752
• No-op impls for several EVP_PKEY_CTX functions by @justsmth in No-op impls for several EVP_PKEY_CTX functions #1759
• Drop "ipd" suffix from ML-KEM related code by @dkostic in Drop "ipd" suffix from ML-KEM related code #1797
• Upstream merge 2024 08 19 by @skmcgrail in Upstream merge 2024 08 19 #1781
• ML-KEM move to the FIPS module by @dkostic in ML-KEM move to the FIPS module #1802
• Reduce collision probability for variable names by @torben-hansen in Reduce collision probability for variable names #1804
• Refactor ENGINE API and memory around METHOD structs by @smittals2 in Refactor ENGINE API and memory around METHOD structs #1776
• bn: Move x86-64 argument-based dispatching of bn_mul_mont to C. by @justsmth in bn: Move x86-64 argument-based dispatching of bn_mul_mont to C. #1795
• Check at runtime that the tool is loading the same libcrypto it was built with by @andrewhop in Check at runtime that the tool is loading the same libcrypto it was built with #1716
• Avoid matching prefixes of a symbol as arm registers by @torben-hansen in Avoid matching prefixes of a symbol as arm registers #1807
• Add CI for FreeBSD by @justsmth in Add CI for FreeBSD #1787
• Move curve25519 implementations to fips module except spake25519 by @torben-hansen in Move curve25519 implementations to fips module except spake25519 #1809
• Add CAST for SP 800-56Cr2 One-Step function by @skmcgrail in Add CAST for SP 800-56Cr2 One-Step function #1803
• Remove custom PKCS7 ASN1 functions, add new structs by @WillChilds-Klein in Remove custom PKCS7 ASN1 functions, add new structs #1726
• NASM use default debug format by @justsmth in NASM use default debug format #1747
• Add KDF in counter mode ACVP Testing by @skmcgrail in Add KDF in counter mode ACVP Testing #1810
• add support for OCSP_request_verify by @samuel40791765 in add support for OCSP_request_verify #1778
• Fix GitHub/CodeBuild Purge Lambda by @justsmth in Fix GitHub/CodeBuild Purge Lambda #1808
• KBKDF_ctr_hmac FIPS Service Indicator by @skmcgrail in KBKDF_ctr_hmac FIPS Service Indicator #1798
• Update x509 tool to write all output to common BIO which is a file or stdout by @andrewhop in Update x509 tool to write all output to common BIO which is a file or stdout #1800
• Add ML-KEM to speed.cc, bump AWSLC_API_VERSION to 30 by @andrewhop in Add ML-KEM to speed.cc, bump AWSLC_API_VERSION to 30 #1817
• Add EVP_PKEY_asn1_* functions by @justsmth in Add EVP_PKEY_asn1_* functions #1751
• Improve portability of CI integration script by @torben-hansen in Improve portability of CI integration script #1815
• Upstream merge 2024 08 23 by @justsmth in Upstream merge 2024 08 23 #1799
• Replace ECDSA_METHOD with EC_KEY_METHOD and add the associated API by @smittals2 in Replace ECDSA_METHOD with EC_KEY_METHOD and add the associated API #1785
• Cherrypick "Add some barebones support for DH in EVP" by @samuel40791765 in Cherrypick "Add some barebones support for DH in EVP"  #1813
• Add KDA OneStep (SSKDF_digest and SSKDF_hmac) to FIPS indicator by @skmcgrail in Add KDA OneStep (SSKDF_digest and SSKDF_hmac) to FIPS indicator #1793
• Add EVP_Digest one-shot test XOFs by @WillChilds-Klein in Add EVP_Digest one-shot test XOFs #1820
• Wire-up ACVP Testing for SHA3 Signatures with RSA by @skmcgrail in Wire-up ACVP Testing for SHA3 Signatures with RSA #1805
• Make SHA3 (not SHAKE) Approved for EVP_DigestSign/Verify, RSA and ECDSA. by @nebeid in Make SHA3 (not SHAKE) Approved for EVP_DigestSign/Verify, RSA and ECDSA. #1821
• Begin tracking RelWithDebInfo library statistics by @andrewhop in Begin tracking RelWithDebInfo library statistics #1822
• Move EVP ed25519 function table under FIPS module by @torben-hansen in Move EVP ed25519 function table under FIPS module #1826
• Avoid C11 Atomics on Windows by @justsmth in Avoid C11 Atomics on Windows #1824
• Improve pre-sandbox setup by @torben-hansen in Improve pre-sandbox setup #1825
• Add OCSP round trip integration test with minor fixes by @samuel40791765 in Add OCSP round trip integration test with minor fixes #1811
• Add various PKCS7 getters and setters by @WillChilds-Klein in Add various PKCS7 getters and setters #1780
• Run clang-format on pkcs7 code by @WillChilds-Klein in Run clang-format on pkcs7 code #1830
• Move KEM API and ML-KEM definitions to FIPS module by @torben-hansen in Move KEM API and ML-KEM definitions to FIPS module #1828
• fix socat integration CI by @samuel40791765 in fix socat integration CI #1833
• Retire out-of-module KEM folder by @torben-hansen in Retire out-of-module KEM folder #1832
• Refactor RSA_METHOD and expand API by @smittals2 in Refactor RSA_METHOD and expand API #1790
• Update benchmark documentation in tool/readme.md by @andrewhop in Update benchmark documentation in tool/readme.md #1812
• Pre jail unit test by @torben-hansen in Pre jail unit test #1835
• Move EVP KEM implementation to in-module and correct OID by @torben-hansen in Move EVP KEM implementation to in-module and correct OID #1838
• More minor symbols Ruby depends on by @samuel40791765 in More minor symbols Ruby depends on #1837
• ED25519 Power-on Self Test / CAST / KAT by @skmcgrail in ED25519 Power-on Self Test / CAST / KAT #1834
• ACVP ML-KEM testing by @skmcgrail in ACVP ML-KEM testing #1840
• ACVP ECDSA SHA3 Digest Testing by @skmcgrail in ACVP ECDSA SHA3 Digest Testing #1819
• ML-KEM Service Indicator for EVP_PKEY_keygen, EVP_PKEY_encapsulate, EVP_PKEY_decapsulate by @skmcgrail in ML-KEM Service Indicator for EVP_PKEY_keygen, EVP_PKEY_encapsulate, EVP_PKEY_decapsulate #1844
• Add ML-KEM CAST for KeyGen, Encaps, and Decaps by @skmcgrail in Add ML-KEM CAST for KeyGen, Encaps, and Decaps #1846
• ED25519 Service Indicator by @skmcgrail in ED25519 Service Indicator #1829
• Update Allowed RSA KeySize Generation to FIPS 186-5 specification by @skmcgrail in Update Allowed RSA KeySize Generation to FIPS 186-5 specification #1823
• Add ED25519 ACVP Testing by @skmcgrail in Add ED25519 ACVP Testing #1818
• Make EDDSA/Ed25519 POST lazy initalized by @skmcgrail in Make EDDSA/Ed25519 POST lazy initalized #1848
• add support for PEM Parameters without ASN1 hooks by @samuel40791765 in add support for PEM Parameters without ASN1 hooks #1831
• Add OpenVPN tip of main to CI by @smittals2 in Add OpenVPN tip of main to CI #1843
• Ensure SSE2 is enabled when using optimized assembly for 32-bit x86 by @graebm in Ensure SSE2 is enabled when using optimized assembly for 32-bit x86 #1841
• Add support for EVP_PKEY_CTX_ctrl_str - Step Merge in complete history from BoringSSL up to 78b3337 #1 by @justsmth in Add support for EVP_PKEY_CTX_ctrl_str - Step #1 #1842
• Added SHA3/SHAKE XOF functionality by @jakemas in Added SHA3/SHAKE XOF functionality #1839
• Migrated ML-KEM SHA3/SHAKE usage to fipsmodule by @jakemas in Migrated ML-KEM SHA3/SHAKE usage to fipsmodule #1851
• AVX-512 support for RSA Signing by @pittma in AVX-512 support for RSA Signing #1273