Merge upstream v1.0.0 beta#3

Merged

bensze01 merged 86 commits into

Mbed-TLS:developmentfrom

gilles-peskine-arm:merge-upstream-v1.0.0-beta

Jun 8, 2026

Commits on Jan 20, 2026

Commits on Jan 23, 2026

Commits on Jan 24, 2026

Move MLD_MUST_CHECK_RETURN_VALUE from randombytes to mlk_randombytes
mkannwischer
committed
CBMC: Remove namespacing

f15hr
authored and
mkannwischer
committed
linting: add shelcheck for shell script lint

L-series
authored and
mkannwischer
committed
linting: shell: fix shellcheck warnings

L-series
authored and
mkannwischer
committed
Port: Rename benchmark parameters to MLD_BENCHMARK_xxx

willieyz
authored and
mkannwischer
committed
Port: Add PMU cycle counting for Armv8.1-M

willieyz
authored and
mkannwischer
committed
Port: CI test benchmarking binary for M55-AN547 using qemu

willieyz
authored and
mkannwischer
committed

Commits on Jan 25, 2026

Port: add native Keccak x1 and x4 unit tests

willieyz
authored and
hanno-becker
committed

Commits on Jan 26, 2026

Commits on Jan 29, 2026

Commits on Feb 2, 2026

Bump actions/checkout from 5.0.0 to 6.0.2

dependabot[bot]
authored and
mkannwischer
committed

Commits on Feb 3, 2026

Commits on Feb 4, 2026

ACVP: Correct max message length from 65536 bytes to 65536 bits (8192 bytes)
mkannwischer
committed

Commits on Feb 5, 2026

CI: Fix undefined matrix property references

willieyz
authored and
mkannwischer
committed
CI: Fix custom-shell input name in bench_ec2_reusable.yml

willieyz
authored and
mkannwischer
committed
CI: Remove duplicate aarch64 matrix entry in base.yml

willieyz
authored and
mkannwischer
committed
CI: Add actionlint config for self-hosted runner labels

willieyz
authored and
mkannwischer
committed
CI: Fix shellcheck warnings in workflow inline scripts

willieyz
authored and
mkannwischer
committed
CI: Add missing gh_token inputs to action calls

willieyz
authored and
mkannwischer
committed
Lint: Add actionlint to lint Github actions

willieyz
authored and
mkannwischer
committed
CI: Run apt update before installing other software via apt
mkannwischer
committed
Add bare-metal AArch64-virt platform for alignment testing

mkannwischer
authored and
hanno-becker
committed
AArch64: Use alignment-safe Neon loads/stores in Keccak x2/x4

mkannwischer
authored and
hanno-becker
committed
AArch64: Use alignment-safe Neon load/stores in rej_uniform/polz_unpack

mkannwischer
authored and
hanno-becker
committed
AArch64: Align Keccak assembly with mlkem-native

mkannwischer
authored and
hanno-becker
committed

Commits on Feb 6, 2026

Port-CI: Add scheduled daily test against AWS-LC HEAD

willieyz
authored and
mkannwischer
committed

Commits on Feb 7, 2026

x86_64/AArch64: Add .size directive to all assembly functions

authored and
hanno-becker
committed
Mark all non-static declarations as internal or external

hanno-becker
authored and
mkannwischer
committed

Commits on Feb 8, 2026

Use MLD_MUST_CHECK_RETURN_VALUE for all functions with return values

f15hr
authored and
mkannwischer
committed
native: Give single assembly unit a unique name

flynd
authored and
mkannwischer
committed

Commits on Feb 10, 2026

aarch64: Guard parameter-set specific backend files

willieyz
authored and
mkannwischer
committed
x86_64: Guard parameter-set specific backend files

willieyz
authored and
mkannwischer
committed

Commits on Feb 11, 2026

Hol-Light: Add x86 AVX2 iNTT proof

jakemas
authored and
hanno-becker
committed
HOL-Light/x86_64: Refine output bound to 3q/4
hanno-becker
committed

Commits on Feb 12, 2026

Baremetal: Add Cortex-M33 MPS3-AN524 platform support

jricardini
authored and
mkannwischer
committed

Commits on Feb 13, 2026

Commits on Feb 14, 2026

Unit tests: Guard i32 helper functions for tests with arithmetic backends only

mkannwischer
authored and
hanno-becker
committed
CI: Enable optimized code testing for M55-AN547

mkannwischer
authored and
hanno-becker
committed
Armv8.1-M: Add MVE Keccak-f1600 x4 implementation

authored and
hanno-becker
committed
Armv8.1-M: Disable backend by default

mkannwischer
authored and
hanno-becker
committed
Consolidate imports of stdint.h

willieyz
authored and
hanno-becker
committed
README: Add footnote regarding need for stdint.h and uint64_t

willieyz
authored and
hanno-becker
committed
Consolidate inclusion of <string.h> via common.h

willieyz
authored and
hanno-becker
committed

Commits on Feb 26, 2026

CI: Use availability-zones-config for EC2 runner workflows
mkannwischer
committed

Commits on Mar 3, 2026

Bump aws-actions/configure-aws-credentials from 5.1.0 to 6.0.0

dependabot[bot]
authored and
mkannwischer
committed
Bump machulav/ec2-github-runner from 2.4.3 to 2.5.2

dependabot[bot]
authored and
mkannwischer
committed
Bump tj-actions/changed-files from 47.0.1 to 47.0.4

dependabot[bot]
authored and
mkannwischer
committed
Bump actions/upload-artifact from 6.0.0 to 7.0.0

dependabot[bot]
authored and
mkannwischer
committed
Correct operator precedence in ensures clause of mld_caddq()

rod-chapman
authored and
mkannwischer
committed
Correct assertion in polyveck_add()

rod-chapman
authored and
hanno-becker
committed
CI: Disable benchmarking CI on self hosted boards

mkannwischer
authored and
hanno-becker
committed

Commits on Mar 4, 2026

liboqs integration: Add support for external-mu signature

abhi-dev-engg
authored and
mkannwischer
committed
CI: Skip OpenTitan workflow on forks
mkannwischer
committed
CBMC: Correct contract and naming of mld_poly_chknorm_native()

rod-chapman
authored and
mkannwischer
committed

Commits on Mar 9, 2026

AArch64: Support unaligned inputs for top-level APIs

mkannwischer
authored and
hanno-becker
committed

Commits on Mar 17, 2026

Commits on Mar 20, 2026

Commits on Mar 21, 2026

AArch64: Fix buffer overread in aarch64 polyz_unpack_{17,19}
mkannwischer
committed

Commits on Mar 24, 2026

Add AArch64 ML-DSA Forward NTT HOL Light proof

dkostic
authored and
mkannwischer
committed
CBMC: Add AArch64 NTT contract and proof
mkannwischer
committed
Merge AArch64 and x86_64 mldsa_specs.ml into common/mldsa_specs.ml

dkostic
authored and
mkannwischer
committed

Commits on Apr 13, 2026

Merge tag 'v1.0.0-beta' into merge-upstream-v1.0.0-beta
gilles-peskine-arm
committed