aws/aws-lc v4.0.0

on GitHub

New Versioning Policy

AWS-LC v4.0.0, the first LTS release using our new versioning scheme.

What's Changed

• AWS-LC-FIPS v4.0.0 by @torben-hansen in #2683
• [cherry-pick for 2025 FIPS] Fix prefix jitterentropy by @justsmth in #2690
• [cherry-pick FIPS 2025] Support FIPS build for Windows/ARM64 (#2688) by @justsmth in #2693
• [cherry-pick FIPS 2025] Fix illumos/OpenSolaris (#2698) by @justsmth in #2701
• [Cherry-pick FIPS 2025] Fix build - path with spaces by @justsmth in #2703
• [Cherry-pick FIPS 2025] Make N1 cpucap a subset of that of V1 and V2 (#2815) by @nebeid in #2838
• [Cherry-pick FIPS 2025] Add support for HMAC-SHA3 to ACVP tool by @samuel40791765 in #2868
• [Cherry-pick FIPS 2025] Move dk to Tests in ML-KEM ACVP by @samuel40791765 in #2869
• [Cherry-pick FIPS 2025] Add encap/decapKeyCheck support in ACVP by @samuel40791765 in #2875
• Add support for external contexts in ML-DSA ACVP by @samuel40791765 in #2881
• [Cherry-pick FIPS 2025] Route ML-DSA ACVP to the right APIs by @samuel40791765 in #2890
• [FIPS 4.x] Address Reported Bug Findings by @skmcgrail in #3006
• [FIPS 4.0 - CHERRY-PICK] Fix argument order in hmac_copy by @justsmth in #3016
• [Cherry-pick FIPS 2025] Enable hybrid PQ keyshares on FIPS 4.0 branch by @samuel40791765 in #3038
• [FIPS 4.0 CHERRY PICK] Generate Rust Bindings (#2999) by @justsmth in #3048
• Cherry pick fixes march 02 2026 by @torben-hansen in #3063
• Fix CRL distribution point scope check logic in crl_crldp_check by @samuel40791765 in #3109
• Fix CN fallback handling in name constraints checking by @samuel40791765 in #3108
• [FIPS 4.0 CHERRY-PICK #2977] Support GCC > v14 by @justsmth in #3223
• [FIPS 4.x] Remove jitter entropy tests folder (#2702) by @samuel40791765 in #3224
• [FIPS 4.0 CHERRY-PICK #2994] Cache peer CA names on client side after handshake (#2994) by @WillChilds-Klein in #3244
• [FIPS 4.0 CHERRY-PICK #3181 and #3194] Map rsaesOaep SPKI to RSA in parse_key_type by @crlorentzen in #3246
• [FIPS 2025 CHERRYPICK] Fix FIPS delocator handling of floating-point immediates on aarch64 by @samuel40791765 in #3255
• [FIPS 2025 CHERRYPICK] Fix shared library install on Windows: place DLLs in bin directory (#3225) by @justsmth in #3253
• [FIPS 2025 CHERRYPICK] Add SSL_use_cert_and_key for per-connection cert/key setting (#3114) by @geedo0 in #3257
• [CHERYPICK FIPS 4.0] Make rustfmt optional for Rust bindings generation (#3270) by @justsmth in #3272

Full Changelog: AWS-LC-FIPS-3.3.0...v4.0.0