Release v1.19.0

What's Changed

• Implement support for EVP_chacha20_poly1305 by @geedo0 in #1311
• Read fips scope marker addresses using adrp instead of adr to increase reach by @torben-hansen in #1332
• Expand PEM/X509 test coverage by @justsmth in #1327
• Update OCSP responder integration test timeout by @samuel40791765 in #1341
• Relax test pinging unauthorized OCSP responder by @samuel40791765 in #1343
• Factor out the machine-optimised backend for 25519 algorithms by @torben-hansen in #1340
• Add support and CI for building with librelp by @samuel40791765 in #1317
• Dockerfile and structure change for SAW proofs on X86_64 by @pennyannn in #1345
• Enable 25519 s2n-bignum backend for FIPS build by @torben-hansen in #1344
• More caution with 'rm -rf' by @justsmth in #1346
• Upstream merge 2023-11-30 by @dkostic in #1331
• Mark bcm_redirector functions as local by @skmcgrail in #1352
• Enable Arm SHA384 proofs in AWS-LC CI by @pennyannn in #1348
• Initialize min/max use_default values in SSL_CTX by @WillChilds-Klein in #1350
• Add EVP_chacha20_poly1305() to speed.cc by @geedo0 in #1339
• Improve tcpdump support + integ test by @justsmth in #1351
• Fix accidental deletion in f3e49b0 by @WillChilds-Klein in #1357
• Add gRPC integration tests by @andrewhop in #1265
• Add helper functions needed for NTP by @andrewhop in #1355
• Add print helper functions for RSA and DSA by @andrewhop in #1354
• Update function to avoid division by @WillChilds-Klein in #1360
• tcpdump CI - 'apt-get update' before install by @justsmth in #1363
• Upstream merge 2023 12 11 by @nebeid in #1356
• Bump AWSLC_API_VERSION for EVP_chacha20_poly1305 by @andrewhop in #1358
• Fix issue with older CMake when building FIPS static using Ninja buid system by @skmcgrail in #1362

Full Changelog: v1.18.0...v1.19.0

Release AWS-LC-FIPS v2.0.3

What's Changed

• Use uint8_t not u_int8_t by @samuel40791765 in #1301
• Backport SSL_CTX_get_security_level / SSL_CTX_set_security_level symbols by @skmcgrail in #1334
• Backport "Give BIO an ex_data" for Postgres by @samuel40791765 in #1335
• Backport Perl Compat Fix and Division Fix to fips-2022-11-02, Bump Version to 2.0.3 by @skmcgrail in #1366

Full Changelog: AWS-LC-FIPS-2.0.2...AWS-LC-FIPS-2.0.3

Release: v1.18.0

What's Changed

• Upstream merge 2023-11-20 by @torben-hansen in #1315
• Wire up s2n-bignum Ed25519 backend by @torben-hansen in #1309
• Allow 0 byte read/write in SSL_{read,write}_ex by @WillChilds-Klein in #1316
• Increment session hit counter for ticket resumptions by @WillChilds-Klein in #1320
• Add back SSL_use_certificate_chain_file by @samuel40791765 in #1312
• Log symbol name for fips scope assertion error by @torben-hansen in #1321
• Add support for building with pkgconfig by @samuel40791765 in #1310
• Docker images for loongarch64, ppc64, ppc64le, and riscv64 by @justsmth in #1168
• Use mkstemp instead of tmpname when available by @samuel40791765 in #1325
• CI for Build/Testing on PPC64BE by @justsmth in #1318
• Improve decision logic for s2n-bignum implementation by @torben-hansen in #1323
• Add null-check for input args in SSL_{read|write}_ex by @dkostic in #1326
• CI for PPC32 Cross build/test by @justsmth in #1329
• Give BIO an ex_data by @samuel40791765 in #1328
• Return 0 if using default proto min/max by @WillChilds-Klein in #1322
• Fix expected error string for Postgres integration by @samuel40791765 in #1330
• Improve backwards compatability for the TLS transfer parser by @torben-hansen in #1337
• Prepare release 1.18.0 by @justsmth in #1336

Full Changelog: v1.17.4...v1.18.0

Release: v1.17.4

What's Changed

• Add HybridKeyShare support for SecP256r1Kyber768Draft00 and X25519Kyber768Draft00 by @alexw91 in #1201
• Refactor ED25519_sign into hw and nohw backend by @torben-hansen in #1276
• Add back OCSP integration test executing by @samuel40791765 in #1303
• Refactor ED25519_verify into hw and nohw backend by @torben-hansen in #1305
• Add check for sk_X509_push by @samuel40791765 in #1304
• Upstream merge 2023-11-10 by @samuel40791765 in #1302
• Fix-up curve25519 code to prepare for s2n-bignum by @torben-hansen in #1306
• Fix bn_assert_fits_in_bytes for big-endian by @justsmth in #1258
• Include Codecov in CI by @justsmth in #1307
• Add integration ci for Monit by @samuel40791765 in #1286
• Use OPENSSL_DEPRECATED by @justsmth in #1285
• Silence warning on CMP0116 by @justsmth in #1284
• Add BNAssertTest by @justsmth in #1267
• Update s2n-bignum subtree 2023-11-15 by @torben-hansen in #1308
• Update s2n-bignum subtree 2023-11-19 by @torben-hansen in #1314
• Improve Codecov reporting by @justsmth in #1313
• Bump release version number string to 1.17.4 by @dkostic in #1319

Full Changelog: v1.17.3...v1.17.4

Release v1.17.3

What's Changed

• Upstream merge 2023-11-01 by @justsmth in #1277
• Upstream merge 2023-11-01 (part 2) by @justsmth in #1278
• Only update thread_states_list if freed state is head when prev is NULL by @skmcgrail in #1294
• Add PPC64BE to module wrapper by @andrewhop in #1295
• Revert "Give up on qsort for sk_FOO_sort" by @samuel40791765 in #1299
• Update the integrity hash calculation in bcm.c to handle big/little endian platforms by @andrewhop in #1300

Full Changelog: v1.17.2...v1.17.3

Release AWS-LC-FIPS v2.0.2

What's Changed

• [fips-2022-11-02] Only update thread_states_list if freed state is head when prev is NULL by @skmcgrail in #1298

Full Changelog: AWS-LC-FIPS-2.0.1...AWS-LC-FIPS-2.0.2

Release AWS-LC-FIPS v1.1.4

What's Changed

• [fips-2021-10-20] Only update thread_states_list if freed state is head when prev is NULL by @skmcgrail in #1296

Full Changelog: AWS-LC-FIPS-1.1.3...AWS-LC-FIPS-1.1.4

Release v1.17.2

What's Changed

• EVP_PKEY assert that method is found by @justsmth in #1279
• Rearrange X509 symbols for Monit support by @samuel40791765 in #1272
• Update gha windows instance type names by @samuel40791765 in #1283
• Use uint8_t not u_int8_t by @justsmth in #1287
• Update create_image.sh for formal verification to fetch the updated Dockerfile by @pennyannn in #1281
• Ensure rand_thread_state is always zerod in the event that CRYPTO_set_thread_local needs to call the deconstructor by @skmcgrail in #1288
• Don't use expired certificates if possible. by @samuel40791765 in #1282
• Bump version to 1.17.2 by @skmcgrail in #1290

Full Changelog: v1.17.1...v1.17.2

Release AWS-LC FIPS v2.0.1

What's Changed

• Backport rand_thread_state zero patch to 2022-11-02, bump version to 2.0.1. by @skmcgrail in #1289

Full Changelog: AWS-LC-FIPS-2.0.0...AWS-LC-FIPS-2.0.1

Release AWS-LC-FIPS v1.1.3

What's Changed

• Backport rand_thread_state zero patch to 2021-10-20, bump version to 1.1.3 by @skmcgrail in #1291

Full Changelog: AWS-LC-FIPS-1.1.2...AWS-LC-FIPS-1.1.3