liboqs 0.12.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

release notes

liboqs version 0.12.0
=====================
About
The Open Quantum Safe (OQS) project has the goal of developing and prototyping quantum-resistant cryptography.  More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.
liboqs is an open source C library for quantum-resistant cryptographic algorithms.  Details about liboqs can be found in README.md.  See in particular limitations on intended use.
liboqs can be used with the following Open Quantum Safe application integrations:

oqs-provider: A standalone prototype OpenSSL 3 provider enabling liboqs-based quantum-safe and hybrid key authentication and exchange for TLS 1.3, X.509 certificate generation and CMS operations.
OQS-BoringSSL: A prototype integration of liboqs-based authentication and key exchange into TLS 1.3 in our fork of BoringSSL; see https://github.com/open-quantum-safe/boringssl.
OQS-OpenSSH: A prototype integration of liboqs-based authentication and key exchange into Secure Shell (SSH) version 2 in our fork of OpenSSH; see https://github.com/open-quantum-safe/openssh.

Several demos are available for using the above libraries in applications, including Apache, Chromium, curl, haproxy, nginx, and Wireshark.
liboqs can also be used in the following programming languages via language-specific wrappers:

C++, via https://github.com/open-quantum-safe/liboqs-cpp
Go, via https://github.com/open-quantum-safe/liboqs-go
Java, via https://github.com/open-quantum-safe/liboqs-java
Python 3, via https://github.com/open-quantum-safe/liboqs-python
Rust, via https://github.com/open-quantum-safe/liboqs-rust

Release notes
This is version 0.12.0 of liboqs. It was released on December 9, 2024.
This release updates the ML-DSA implementation to the final FIPS 204 version. This release still includes the NIST Round 3 version of Dilithium for interoperability purposes, but we plan to remove Dilithium Round 3 in a future release.
Deprecation notice
This will be the last release of liboqs to include Kyber (that is, the NIST Round 3 version of Kyber, prior to its standardization by NIST as ML-KEM in FIPS 203). Applications should switch to ML-KEM (FIPS 203).
The addition of ML-DSA FIPS 204 final version to liboqs has introduced a new signature API which includes a context string parameter. We are planning to remove the old version of the API without a context string in the next release to streamline the API and bring it in line with NIST specifications. Users who have an opinion on this removal are invited to provide input at open-quantum-safe/liboqs#2001.
Security issues

CVE-2024-54137: Fixed bug in HQC decapsulation that leads to incorrect shared secret value during decapsulation when called with an invalid ciphertext. Thank you to Célian Glénaz and Dahmun Goudarzi from Quarkslab for identifying the issue.

What's New
This release continues from the 0.11.0 release of liboqs.
Key encapsulation mechanisms

HQC: Fixed bug in decapsulation that leads to incorrect shared secret value during decapsulation when called with an invalid ciphertext. Thank you to Célian Glénaz and Dahmun Goudarzi from Quarkslab for identifying the issue.
Kyber: This is the last release of liboqs to include Kyber.
ML-KEM: Improved testing of ML-KEM.

Digital signature schemes

LMS: Fixed crashing bug.
ML-DSA: Removed FIPS 204-ipd (initial public draft) and replaced it with FIPS 204 final version.
Added new API for digital signatures with context strings; see Deprecate signature API without context string? open-quantum-safe/liboqs#2001 for plan to remove old API without context string.
Added fuzzing tests for signature schemes.
Added benchmarking for stateful hash-based signature schemes.

Other changes

Updated CBOM format to version 1.6.
Added a function OQS_thread_stop to be called by multi-threaded applications to properly deallocate resources in a threaded execution.
Added preprocessor macros conveying liboqs version information.


Detailed changelog
What's Changed

0.11.0 release by @praveksharma in 0.11.0 release open-quantum-safe/liboqs#1939
Bump version to 0.11.1-dev by @SWilson4 in Bump version to 0.11.1-dev open-quantum-safe/liboqs#1940
Remove hardcoded build patch from test script by @iyanmv in Remove hardcoded build patch from test script open-quantum-safe/liboqs#1938
Don't include dlfcn.h for Windows by @steenrasmussen in Don't include dlfcn.h for Windows open-quantum-safe/liboqs#1936
Update CBOM format to upstream v1.6 by @bhess in Update CBOM format to upstream v1.6 open-quantum-safe/liboqs#1834
Downgrade zephyr container to v0.26.14 to avoid build failures by @bhess in Downgrade zephyr container to v0.26.14 to avoid build failures open-quantum-safe/liboqs#1949
Fix for Zephyr CI by @Frauschi in Fix for Zephyr CI open-quantum-safe/liboqs#1953
Add a basic fuzz testing harness for Dilithium2 by @nathaniel-brough in Add a basic fuzz testing harness for Dilithium2 open-quantum-safe/liboqs#1905
[#1823] replace malloc/calloc/strdup/free with openssl allocator by @songlingatpan in [#1823] replace malloc/calloc/strdup/free with openssl allocator open-quantum-safe/liboqs#1926
Add benchmarking for stateful hash based schemes: speed_sig_stfl by @cr-marcstevens in Add benchmarking for stateful hash based schemes: speed_sig_stfl open-quantum-safe/liboqs#1952
Update CODEOWNERS by @dstebila in Update CODEOWNERS open-quantum-safe/liboqs#1943
Add new API to cleanup OpenSSL threads. by @ashman-p in Add new API to cleanup OpenSSL threads. open-quantum-safe/liboqs#1959
Adapt existing sig fuzz harness including more algorithms by @nathaniel-brough in Adapt existing sig fuzz harness including more algorithms open-quantum-safe/liboqs#1955
add C++ linking test by @aidenfoxivey in add C++ linking test open-quantum-safe/liboqs#1971
Make random/functions deterministic during fuzzing by @nathaniel-brough in Make random/functions deterministic during fuzzing open-quantum-safe/liboqs#1974
Remove SPHINCS+ aarch64 code by @SWilson4 in Remove SPHINCS+ aarch64 code open-quantum-safe/liboqs#1972
Remove macos-12 runner due to GitHub deprecation. by @SWilson4 in Remove macos-12 runner due to GitHub deprecation. open-quantum-safe/liboqs#1977
Revert "Disable erroring TravisCI build" by @bhess in Revert "Disable erroring TravisCI build" open-quantum-safe/liboqs#1960
imported fix from CROSS upstream: endianness-aware csprng by @rtjk in imported fix from CROSS upstream: endianness-aware csprng open-quantum-safe/liboqs#1983
chore: Add CI badges to README.md by @ChinoUkaegbu in chore: Add CI badges to README.md open-quantum-safe/liboqs#1987
Update PLATFORMS.md / re-enable CROSS on s390x by @SWilson4 in Update PLATFORMS.md / re-enable CROSS on s390x open-quantum-safe/liboqs#1988
Avoid OpenSSL functions are unconditionally called at OQS_destroy by @ueno in Avoid OpenSSL functions are unconditionally called at OQS_destroy open-quantum-safe/liboqs#1982
Test Improvements for ML-KEM by @abhinav-thales in Test Improvements for ML-KEM open-quantum-safe/liboqs#1947
Add patch to fix HQC decapsulation in open-quantum-safe/liboqs@95f904b
Run copy_from_upstream.py in open-quantum-safe/liboqs@cce1bfd
Fix LMS crash by @ashman-p in Fix LMS crash open-quantum-safe/liboqs#1998
Set ML-KEM alg_version to "FIPS203" by @SWilson4 in Set ML-KEM alg_version to "FIPS203" open-quantum-safe/liboqs#1997
Add ML-DSA / FIPS 204 final by @bhess in Add ML-DSA / FIPS 204 final open-quantum-safe/liboqs#1919
Add defines for OQS version components by @dstebila in Add defines for OQS version components open-quantum-safe/liboqs#2000
Create liboqs 0.12.0 release candidate 1 by @dstebila in Create liboqs 0.12.0 release candidate 1 open-quantum-safe/liboqs#2006

New Contributors

@steenrasmussen made their first contribution in Don't include dlfcn.h for Windows open-quantum-safe/liboqs#1936
@nathaniel-brough made their first contribution in Add a basic fuzz testing harness for Dilithium2 open-quantum-safe/liboqs#1905
@songlingatpan made their first contribution in [#1823] replace malloc/calloc/strdup/free with openssl allocator open-quantum-safe/liboqs#1926
@cr-marcstevens made their first contribution in Add benchmarking for stateful hash based schemes: speed_sig_stfl open-quantum-safe/liboqs#1952
@aidenfoxivey made their first contribution in add C++ linking test open-quantum-safe/liboqs#1971
@ChinoUkaegbu made their first contribution in chore: Add CI badges to README.md open-quantum-safe/liboqs#1987
@abhinav-thales made their first contribution in Test Improvements for ML-KEM open-quantum-safe/liboqs#1947

Full Changelog: open-quantum-safe/liboqs@0.11.0...0.12.0

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.