3.8.8
liboqs: provide SHA2 stubs
liboqs: defer loading of liboqs at run-time
build: plumb liboqs as an optional dependency