master
(xmlsec-core) Added xmlSecMemEqual to compare two buffers in constant time and upgraded the code to use it (#1191)
reject HMACOutputLength larger than the HMAC digest size (#1199)
(xmlsec-mscng) Added support for using both current user and local machine certificates store for verifying the certificates (#1216)
return 0 on signature mismatch in nss/mscng/mscrypto verify (#1196)
Fix minor issues from coverity run (#1208)
Refactor helpers (#1066)
(xmlsec-core) Add warning that init/shutdown sequence should happen only once (#1151)
Update file headers for doxygen, use common copyright header, bump copyright to 2026 (#1122)
Add tests for xmlSecBn* functions and fix a couple issues (#1166)
Added unit tests for xmlSecBuffer (#1200)
(xmlsec-openssl) Added experimental ML-KEM support (#1137)
(xmlsec-core) Separate user vs system callback to allow setting callback before initialization (#1150)
free doc after using cur in xmlSecKeyDataRetrievalMethodReadXmlResult (#1193)
Fix double-free in xmlSecKeyUseWithDuplicate on copy failure (#1172)
return error from xmlSecKeyDataBinaryValueBinRead on key req mismatch (#1194)
Refactor KeyAgreement processing to cache key lookup results when signing / encrypting data (#1145)
(xmlsec-gnutls) Ensure that key cert is always the first one (#1192)
free node set when xmlSecNodeSetCreate fails in xmlSecNodeSetGetChildren (#1188)
Free node list when xmlListInsert fails in Relationship transform (#1164)
free node on xmlSetProp failure in xmlSecTmplX509DataAddDigest (#1189)
Fix memory leak when error occurs during buffer close (#1210)
(xmlsec-core) Added tests to the X509 serial parser (#1211)
Free key-name strings on master-key lookup failure in DerivedKey (#1168)
fix use-after-free in xmlSecQName2BitMaskNodesRead (#1178)
free docIn/docOut on output close error in xmlSecXslProcess (#1171)