What's Changed
- Cherry-pick BORINGSSL_bcm_text_hash Go utility by @skmcgrail in #2221
- Cherry-pick: Fix out-of-bound (OOB) input read in AES-XTS Decrypt in AVX-512 implementation by @nebeid in #2228
- Cherry-pick support for CMake 4.0 to fips-2024-09-27 by @justsmth in #2277
- Cherry-pick to fips-2024-09-27 by @skmcgrail in #2254
- Cherrypick SSL_CTX_use_cert_and_key for Librdkafka 2.8.0 support by @smittals2 in #2292
- [fips-2024-09-27][cherry-pick] FIPS Integrity Hash Tooling (#2296) by @skmcgrail in #2300
- Cherry-pick: Harden bound checking tests of AES-XTS and replace SSE instructions that degraded performance for certain input lengths by @nebeid in #2319
- [FIPS - Cherry-pick] Support allowing specific unknown critical extensions (#2377) by @justsmth in #2473
- [cherry-pick] Add back X509_STORE_get_verify_cb and X509_STORE_set_lookup_crls_cb by @skmcgrail in #2587
- Cherry-pick TLS transfer serialization changes to FIPS 3.x branch by @skmcgrail in #2672
- [cherry-pick for 2024 fips] Fix RSAZABI test and enable IFMA based RSA on Windows (#1869) by @torben-hansen in #2689
- [FIPS 2024 - CHERRY_PICK] Offer P521 for signature_algorithms in client Hello (#2572) by @justsmth in #2731
- Add CTR-DRBG derivation function by @torben-hansen in #2863
- Prepare FIPS 3.1.0 release by @torben-hansen in #2878
Full Changelog: AWS-LC-FIPS-3.0.0...AWS-LC-FIPS-3.1.0