Log message:
libgcrypt: fix for error: operand size mismatch for 'vsm4rnds4'

Log message:
libgcrypt: updated to 1.12.3

Noteworthy changes in version 1.12.3 (2026-08-26)

* Bug fixes:

  - Avoid theoretical drive-by loading of netapi32.dll and
    shell32.dll.
  - Validate hash algorithm for use with RSA modulus.
  - Validate parameters of Balloon KDF.
  - Validate parallelism of Argon2 KDF.
  - Fix parsing quoted parts and CRLF/LFCR in s-expression.
  - Support BUFLEN check for GCRYMPI_FMT_SSH.
  - Fix RSA PSS verify message length checking.
  - Avoid a NULL ptr deref due to a unsupported genkey flag for
    ECC.
  - Assert 32 KiB input cap in gcm_ctr_encrypt.
  - Fix assertion failure in OCB when a buffered block becomes block
    65536.
  - Fix OOB read in IMIT MAC verify of GOST28147.
  - Fix CMAC block-count truncation for 64 GiB writes.
  - Fix AEAD spurious byte-counter carry for 4 GiB adds.
  - Validate all KEM input lengths.
  - Add length check of DATALEN when parsing s-expression.
  - Only accept canonical value for S with EdDSA.
  - Only accept canonical signatures for RSA.
  - Fix an assertion failure for invalid small-order Ed25519 public
    keys.
  - Validate length of supplied receiver public-key length in DHKEM
    decapsulation.
  - Use a more strict value for the PKCS#1 minimal frame length.

* Performance:

  - Use just strong random for the Dilithium signature nonce and the
    Kyber encapsulation coins.
  - Allow internal users to skip fast random poll for ciphers and
    hashes.
  - Speedup sntrup761 by defer reduction in polynomial multiplication,
    reading random with a single call, and reducing freeze helpers
    w/o division.
  - Avoid byte-wise load/store on RISC-V with Zicclsm.
  - Use unaligned vector memory access on RSIV-V when supported.
  - Add Intel SM4 instructions accelerated AVX512 and AVX2
    implementation.
  - Add Intel SM3 extension implementation.
  - Add Intel SHA512 extension implementation.

* Other:

  - kyber: Accept and return a seed using the gcry_pk_genkey API.
  - Add curve "ietf25" as alternative to "Curve25519" with exact
    RFC-8410 semantics.  The name "X25519" was already used as an
    alias, thus this new name.
  - Add straight-line speculation hardening for function ends.
  - Fix constant time memequal check for SM2.
  - Add post-quantum algorithm benchmarking to bench-slope.
  - Due to the minor API updates and but with no newer branch
    released the SO name has been updated.

Log message:
libgcrypt: updated to 1.12.2

Noteworthy changes in version 1.12.2 (2026-04-15)

 * Bug fixes:

   - Fix possible ECDH buffer overwrite with zeroes.
   - Add a missing bounds check to the Dilithium context handling.
   - Add point validation when using the new KEM interface.

 * Other:
   - Fix the dead-code of stronger_key_check for RSA.

Log message:
libgcrypt: updated to 1.12.1

Noteworthy changes in version 1.12.1 (2026-02-20)

 * Bug fixes:

   - Fix for aSmartOS (Solaris) build problem due to AVX2 changes.

   - Fix a regression in gcry_mpi_ec_curve_point.

   - Make sure to have MPI limbs pre-allocated in ECC and fix
     Weierstrass curve use with PUBKEY_FLAG_PARAM.

 * Other:

    - Add MPI configuration for NetBSD m68k.

Log message:
libgcrypt: add upstream patch candidate for SmartOS fix

Log message:
libgcrypt: update to 1.12.0.

Noteworthy changes in version 1.12.0 (2026-01-29)  [C27/A7/R0]
-------------------------------------------------

 * New and extended interfaces:

   - Allow access to the FIPS service indicator via the new
     GCRYCTL_FIPS_SERVICE_INDICATOR control code.
     [T7338,rCd0db6a5abf,rCf51f4e9893]

   - Add GCRYCTL_FIPS_REJECT_NON_FIPS control code.  [T7338,rCe52adf0948]

   - Add GCRY_FIPS_FLAG_REJECT_PK_FLAGS constant.  [T7338,rC0414e126b9]

   - Make SHA-1 non-FIPS internally for the 1.12 API.  This introduces
     the GCRY_FIPS_FLAG_REJECT_MD_SHA1 constant.  [rC4ee91a94bc]

   - Add GCRY_FIPS_FLAG_REJECT_PK_FLAGS.  [rC0414e126b9]

   - Provide macros for each KEM enum constant.  [rCe9b1c3ec91]

   - Add Dilithium (ML-DSA) support.  [T7640]

   - Support optional random-override and support byte string data.
     [rCcbefff5fca,rC3bb4a54f43]

 * Performance:

   - Add VAES/AVX512 accelerated implementation for AES which boosts
     OCB performance by about 2 times on AMD Zen5.  [rC9e3af928ee]

   - Avoid AVX512/AVX2/SSSE3 for single block processing with Zen5 for
     ChaCha20.  [rCc1d9fff3b2]

   - Avoid AVX/AVX2/AVX512 when CPU has high vector inst latency like
     Zen5 for Blake2.  [rCe5bc3b2826]

   - Various optimizations for Camellia.
     [rCf5848080d4,rCb9bafd6c6c,rC8b538a8c76]

   - Add POLYVAL acceleration for RISC-V and GCM-SIV.  [rC00815c4207]

   - Add RISC-V Zbb+Zbc implementation of CRC.  [rCab4fa2a19c]

   - Add RISC-V vector cryptography implementation of GHASH.
     [rCcc2a4b6388]

   - Add RISC-V vector cryptography implementation of AES.
     [rCb000ab6025]

   - Add RISC-V vector cryptography implementations of SHA256 and
     SHA512.  [rCcc1d5b0b5e]

   - Add AVX2 and AVX512 code paths to improve CRC.  [rCc30788969d]

 * Bug fixes:

   - Use secure MPI in _gcry_mpi_assign_limb_space.  [rC6e77b09cff]

   - Use CSIDL_COMMON_APPDATA instead of /etc on Windows.  [rCd5e3cbfd88]

   - Apply a Kyber patch from upstream.  [rCbdc3724d72]

   - Fix an edge case in Jent initialization.  [rC0ceca9993f]

   - mceliece6688128f: Fix stack overflow crash on win64/wine
     [rC5bd9320171]

 * Other:

  - Add support for IBM z/OS, fixing -lpthread check with glibc.
    [rC5af59d8454]

  - Introduce mpi_tfr and use it for point_tfr to decrease EM signal
    and increase EM noise.  [rC4e65996bb8]

  - Handle HAVE_BROKEN_MLOCK for the case of building with ASAN.
    [T7889]

  - Harden mask generation against branch optimization for several
    algorithms.  [e.g. rC4012e9a037,rCbf7546c502,rC052b03fb0c]

  - Improve constant-time operation for ECDSA.  [T7519,rC0bd4c77be6]

Log message:
libgcrypt: Fix bswap patch.

Log message:
libgcrypt: updated to 1.11.2

Noteworthy changes in version 1.11.2 (2025-08-04)

 * Bug fixes:

   - Fix link errors in regression test t-thread-local on some
     platforms (e.g. NetBSD).

   - Add missing file to allow building for RISC-V.

   - Support secp256k1 by KEM API.  GnuPG has recently switched to use
     the KEM interface and a few folks are using this curve.

   - Fix a missing initialization in RSA's generate_fips.

 * Other:

   - Silence GCC 15 warnings

   - Provide a prototype for __udiv_qrnnd for PowerPC and Alpha which
     is required due to GCC-15 changes.

   - Add missing abi versions and machine tags for PowerPC assembly
     with GCC-15.

   - Use '.rodata' section for read-only data of poly1305-p10le.

 * Interface changes relative to the 1.11.1 release:
   GCRY_KEM_RAW_P256R1                   NEW enum.