Tomáš Mráz

The release tarballs are signed with a sub-key of the primary gpg key

1

We should somehow make the fact more clear to users at least in fingerprints.txt.

Update CHANGES.md and NEWS.md from 3.0.7

1

##### Checklist - [x] documentation is added or updated

When using PEM_read_bio_PrivateKey_ex() the public key is optional

5

Fixes #19498 However the private key part is not optional which was mishandled by the legacy routine. It would be nice to have a test for this however this needs...

Make CMAC properly fail if cipher is not CBC mode one

13

Also avoid misleading users in the demo by use of the alias name. ##### Checklist - [x] documentation is added or updated - [x] tests are added or updated

rsaz_exp_x2.c: Avoid potential undefined behavior with strict aliasing

23

Fixes #19584

Backport of PRs to 3.1 branch [batch 2]

1

Second batch of backport commits to 3.1. Made on top of first batch #19587 so draft until that one is merged.

Fix regression in handling signatures with named digest commands

1

Fixes #19589 ##### Checklist - [x] tests are added or updated

fips-label.yml: Fix the script after actions/github-script upgrade

3

The github rest calls are now under `.rest`. The FIPS changed label is not being properly set now so marking urgent.

Use libctx when generating DH parameters

8

We did not use libctx when generating the safe prime DH parameters. It needs to be passed via BN_CTX.

Limit size of modulus for BN_mod_exp_mont_consttime()

1

Otherwise the powerbufLen can overflow. Issue reported by Jiayi Lin.