openssl-3.6.0

[Bruce Dubbs]

New minor version

This release incorporates the following potentially significant or incompatible changes:

• Added NIST security categories for PKEY objects.

• Added support for EVP_SKEY opaque symmetric key objects to the key derivation and key exchange provider methods. Added EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY(), and EVP_PKEY_derive_SKEY() functions.

• Added LMS signature verification support as per [SP 800-208].. This support is present in both the FIPS and default providers.

• An ANSI-C toolchain is no longer sufficient for building OpenSSL. The code should be built using compilers supporting C-99 features.

• Support for the VxWorks platforms has been removed.

• Added an openssl configutl utility for processing the OpenSSL configuration file and dumping the equal configuration file.

• Added support for FIPS 186-5 deterministic ECDSA signature generation to the FIPS provider.

• Deprecated EVP_PKEY_ASN1_METHOD-related functions.