master
[crypto] Add TLS named groups for FFDHE key exchange algorithms
[crypto] Add confidentiality flag for cipher algorithms
[malloc] Add zfree() to zero and then free a memory block
[doc] Document the threat model relevant to iPXE
[crypto] Use generic implementations of slow-path big integer functions
[crypto] Allow cipher_setiv() to return an error
[build] Mark known reviewed files as permitted for UEFI Secure Boot
[build] Mark core files as permitted for UEFI Secure Boot
[crypto] Add a null key exchange algorithm
[build] Fix technically undefined left shifts in reputable code
[crypto] Use private data field for cipher algorithms
[crypto] Allow construction of shared public key to return an error
[crypto] Add assertion on HKDF output length
[crypto] Allow for the construction of fixed-size HMAC keys
[crypto] Generalise implementation of Merkle-Damgård hash algorithms
[crypto] Define a structure for holding hybrid MD5+SHA1 HMAC keys
[build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot
[crypto] Avoid false positive warnings about mutating static state
[crypto] Generalise notion of uncompressed elliptic curve points
[crypto] Fix out-of-bounds memset() with invalid RSA modulus
[crypto] Simplify internal HMAC API
[crypto] Add redundant high-bit clamp to X25519 scalar multiple
[crypto] Remove harmless but technically undefined left shift