master
* Initial checkin.
Add support for ML-KEM key encapsulation mechanism
Add missing ml-kem test files to distribution.
Implement aes key wrap and key unwrap (RFC 3394)
Delete unneeded define of _NETTLE_ATTRIBUTE_DEPRECATED in aes and gcm tests.
New file, with the output of testsuite/aes-test, when aes.c has been compiled with debugging printouts of intermediate state.
Dropped length argument from nettle_set_key_func.
Update copyright headers for dual licensing, testsuite directory.
Delete fail variable in tests
Update api for base16_decode_update and base16_decode_update.
Move bcrypt tests to its own file. ChangeLog entries for bcrypt.
Use WITH_HOGWEED instead of HAVE_LIBGMP for preprocessor conditionals.
Testsuite overhaul, including proper deallocation of storage.
Reorganized camellia interface
Split nettle-internal into nettle-internal and non-nettle.
Add tag_length to ccm_ctx, and drop length argument to ccm_digest.
Update CBC and CFB tests to use aes256_ctx, not the deprecated aes_ctx.
Update chacha-poly1305 for draft-irtf-cfrg-chacha20-poly1305-08.
Improve chacha test coverage.
Improve hmac tests, delete HMAC_TEST macro.
Let make check test for side channel silence, if valgrind is available.
Add sidechannel tests for curve25519.
Add sidechannel tests for curve448.
Delete length argument to nettle_hash_digest_func.
Use size_t in testsuite.
dlopen-test: Use libnettle.dylib on MacOS.
Add DRBG-CTR-AES256.
Delete all code and docs for dsa-compat.h.
Generalized nettle_aead abstraction, and moved to nettle-meta.h.
New function ecc_nonsec_add_jjj
In tests, delete ASSERTs with functions pointer comparisons.
Rework test randomization, new functions test_get_seed and test_randinit.
Implement Curve448 primitives
Share ecc point validation function in testutils.c.
Fixes for ecdsa-sign-test in noasm and mini-gmp builds.
Fix ECDSA verify corner case
Add missing check that the final octet of an ed448 signature is zero.
New smaller struct sha3_ctx.
* testsuite/yarrow-test.c (test_main): Use gold-bug.txt as input file, instead of rfc1750.txt.
Delete function mpz_limbs_read_n.
Add GOST DSA according to GOST R 34.10-2001/-2012
Add support for GOSTHASH94CP: GOST R 34.11-94 hash with CryptoPro S-box
memxor-test: Use valgrind client requests.
gcm: Add SM4 as the GCM underlying cipher
Stricter validation of nettle_cipher and nettle_hash in tests.
Add sha512_224 and sha512_256 to nettle_hashes.
Add nettle_mac structs for gosthash94 and gosthash94cp.
More randomized tests of ml-kem, add asserts for arithmetic primitives.
Add tests for pbkdf2_hmac_sha384 and pbkdf2_hmac_sha512
abi: explicitly export intended symbols and hide others
Implement PSS encoding functions
Delete valgrind magic in pss-test.
Reduce test count for some of the slower tests.
Add input check to rsa_decrypt family of functions.
Updated RSA and DSA tests, after the previous change to nettle_mpz_random.
Skip sc-rsa-oaep-encrypt-test when compiled with mini-gmp.
Revert part of 67aae9d.
New function rsa_compute_root_tr.
Reject invalid RSA keys with even modulo.
Delete old salsa20 compatibility aliases.
Add side-channel test for ecdsa-sign-test.
Add sidechannel tests for ed25519 and ed448.
Implement encryption/decryption RSA-OAEP
Implement slh-dsa-shake128s.
Add sntrup761 tests.
Skip side-channel tests of rsa-sec-decrypt when built with mini-gmp.
Fix pointer sign warnings for sexp-format-test.
Fix arithmetic overflow issues in sexp parser.
Replaced all internal usage of sha.h.
Fix compile error in --disable-public-key configuration.
testsuite: updated SHA3 tests to the FIPS202 final version
ChangeLog entry for SHA3 update, and link to current test vectors.
Test sha512_224 and sha512_256.
Reformatted SHA512 intermediate values.
Support for SHAKE256, based on patch by Daiki Ueno.
Rework SIV tests.
Implement slh-dsa-sha2-128f.
Implement slh-dsa-sha2-128s.
Additional slh-dsa test cases.
Implement slh-dsa-shake-128f.
Return success/failure from slh-dsa signing functions.
testsuite: add test for SM3 hash function
testsuite: add test for SM4 symmetric algorithm
testsuite: add test for Streebog hash function
testsuite/symbols-test: Exclude ____chkstk_darwin symbols.
Rework make targets related to test-rules.
Include version.h in version-test.c
x86: Add x86-ibt-test.c
Add support for XTS encryption mode
New testutils function open_srcdir_file.
(main): Updated testcase to match fixed generator.