master
Bug 1629553 Merge simple config.mk files r=rrelyea
Bug 1879513 - Certificate Compression: enabling the check that the compression was advertised r=nss-reviewers,djackson
Bug 1300837 - clang-format: lib/util, r=kaie
Bug 1268141 - pk12util can't import PKCS#12 files encrypted with AES-128-CBC, r=rrelyea
Bug 2031756 - Backed out changeset 0c15a0d01cae
Bug 2027374 - bounds check multibyte DER length in der_capture and der_indefinite_length. r=nss-reviewers,jschanck
Bug 2027375 - account for primitive payload bytes in DER_INDEFINITE contents_length. r=nss-reviewers,jschanck
Bug 1306948 - Make DER integer decoding a little easer to read r=franziskus
Bug 2031756 - Backed out changeset 83110dba958b
Bug 1983313 support secp384r1mlkem1024
Bug 1983320 ml-dsa: softoken changes
Bug 1753026: HACL SHA3, r=jschanck
Bug 2022059 NSS can't import, store, or export mlk-kem keys.
Bug 2012002 - remove lock instrumentation feature. r=nss-reviewers,djackson,rrelyea
Bug 1983320 - Add support for ML-DSA key type and public key structure r=rrelyea
Bug 2027376 - Add an integer overflow guard in UpdateBase64Decoder r=nss-reviewers,rrelyea
Bug 863871: Remove CVS keywords from NSS source files, Part 1 (trivial cases). r=wtc.
Bug 1930797 pkcs12 fixes from RHEL need to be picked up.
Bug 1793811 Implement support for PBMAC1 in PKCS#12 r=bbeurdouche
Bug 1753315 - Add SECMOD_LockedModuleHasRemovableSlots. r=rrelyea
Bug 1983320 ml-dsa: Prep Create a FindOidTagByString function
Set version numbers to 3.127 beta
Bug 845556, reorganize NSS directory layout, moving files, very large changeset! r=wtc
Bug 1965327 PKCS #11 v3.2 header files.
Bug 2017920 Generate keys not getting indicators.
Bug 1472254 - Suppress -Wpragma-pack warning spam
Bug 1836559 - Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS. r=rrelyea
Bug 2023478 - improve handling of escape sequences in pk11uri_ParseAttributes. r=nss-reviewers,keeler
Bug 1681099, pk11wrap: Tighten certificate lookup based on PKCS #11 URI, r=kjacobs,rrelyea
Bug 1296986, Disable parameter unsafeAllowMissingParameters in _SGN_VerifyPKCS1DigestInfo, based on a patch contributed by David Benjamin (davidben@google.com), r=fkiefer
Fix bug 1064636, patch part 1, r=rrelyea
Bug 1911912 - Avoid misuse of ctype(3) functions r=jschanck
Bug 2027380 - pass offset-adjusted pointer to SEC_ASN1GetSubtemplate in QuickDER call sites. r=nss-reviewers,jschanck
Bug 1917311 - part 2: run clang-format. r=nss-reviewers,bbeurdouche
Bug 2056291 - remove support for pre-v1.0 PKCS#12. r=nss-reviewers,keeler
Bug 2030979 - handle SEC_ASN1_NULL in sec_asn1e_contents_length. r=nss-reviewers,nkulatova
Bug 1713562 - Validate ECH public names, r=bbeurdouche
Bug 1476200 - remove usage of DER_Lengths and deprecate it, r=mt
Bug 2030794 - avoid memory leak in SECITEM_FreeArray. r=nss-reviewers,keeler
Bug 2019001 - add support for ML-KEM-1024 named group. r=djackson
Bug 2037078 - Implement CMS AuthEnvelopedData decryption (RFC 5083/5084). r=edicharry,kaie,rrelyea
Bug 2051995 - add a faster PORT_SafeZero fallback. r=nss-reviewers,nkulatova
Bug 2027382 - Reject oversized inputs in UTF-8 conversion functions r=nss-reviewers,rrelyea
Bug 1983320 - Enable ML-DSA integration via OIDs support and SECMOD flag r=rrelyea
Bug 1312142, Softoken still does not handle login state correctly for user db slots in FIPS mode, r=kaie
Bug 1795222 - Mark _nss_version_c unused on clang-cl. r=nss-reviewers,jschanck