nss-3.68

[Bruce Dubbs]

New minor version.

[Bruce Dubbs]

Fixed at commit d0d5ea1b7aa98ad96dcacc40d3b5c383f9f93cfc

[Douglas R. Reno]

Bug 1717610 - Add function to get seconds from epoch from pkix::Time r=bbeurdouche,keeler

We need this function for the rewrite of CertVerifier::VerifyCertificateTransparencyPolicy in order to calculate a certificate's lifetime in months.

Bug 1713562 - Validate ECH public names, r=bbeurdouche

This validates that they are LDH (with underscore because we don't hate
freedom), but that they are not IP addresses.  This invokes the horrible WhatWG
IP parsing routines, so that it recognizes a vast array of crazy address formats
(thanks 1980s design).

Bug 1655493 - Support SHA2 HW acceleration using Intel SHA Extension. r=bbeurdouche

Before applying (on Ryzen 9 3900X)
```
#     mode          in  opreps  cxreps     context          op   time(sec)     thrgput
  sha256_e   1Gb 208Mb     23M       0       0.000   10000.000      10.000 123Mb 301Kb
```

After applying
```
#     mode          in  opreps  cxreps     context          op   time(sec)     thrgput
  sha256_e   5Gb 797Mb    110M       0       0.000   10000.000      10.000 591Mb 769Kb

Bug 1712883 - DTLS 1.3 draft-43 r=bbeurdouche
Bug 1693206 - Implement PKCS8 export of ECDSA keys
Bug 1717452 - NSS 3.68 should depend on NSPR 4.32. r=kaie
Added tag NSS_3_68_BETA1 for changeset 352fca8a348e
Bug 1713562 - Fix test leak, r=bbeurdouche
Set version numbers to 3.68 final

[Bruce Dubbs]

Milestone renamed