v1.43.0

What's Changed

• Keccak1600_Squeeze/Absorb Layer (rename) by @manastasova in #2097
• Move ML-DSA to FIPSMODULE by @jakemas in #2095
• Fixes varios issues with rebuilding CI Docker images by @skmcgrail in #2077
• New Year New Broken Mirrors by @skmcgrail in #2102
• Update speed.cc to use the same jitter function as rand.c by @andrewhop in #2100
• Move mldsa and pqdsa out of fipsmodule by @jakemas in #2104
• Remove dilithium flag by @jakemas in #2106
• Add x509-limbo patch and reporting tool by @skmcgrail in #2049
• Allow TLS PSK without server certificate by @WillChilds-Klein in #2083
• Align guard macros for OPENSSL_cpuid_setup by @justsmth in #2111
• Init variable to avoid "may be used uninitialized" warning by @manastasova in #2114
• SCRUTINICE fixes by @smittals2 in #2103
• Remove jent_read_entropy_safe usage from AWS-LC (main) by @smittals2 in #2110
• CDK: Add scrutinice permissions by @justsmth in #2118
• Address Scrutinice findings by @justsmth in #2121
• Finalize ML-DSA asn.1 module by @jakemas in #2117
• Align BN_bn2hex behavior with OpenSSL by @samuel40791765 in #2122
• Upstream merge 2025 01 02 by @nebeid in #2090
• ExternalMu mode for pre-hash ML-DSA by @jakemas in #2113
• Upstream merge 2025 01 17 by @justsmth in #2125
• Add more debug logging to channelID test failures by @andrewhop in #2130
• Compress crypto_test_data.cc by @justsmth in #2123
• Prepare AWS-LC v1.43.0 by @justsmth in #2133

Full Changelog: v1.42.0...v1.43.0