chore(deps): update dependency aws/aws-lc to v1.63.0

[openvpn-inc-ci]

This PR contains the following updates:

Package	Update	Change
aws/aws-lc	minor	v1.61.3 -> v1.63.0

---

Release Notes

aws/aws-lc (aws/aws-lc)

v1.63.0

Compare Source

What's Changed

• Fix tpm2-tss CI by @​samuel40791765 in #​2767
• Fix Ruby integration CI by @​samuel40791765 in #​2765
• Migrate Windows Omnibus to GitHub Workflow by @​skmcgrail in #​2780
• Add compiler to 24.04 docker image by @​samuel40791765 in #​2783
• CI add rpmbuild job by @​torben-hansen in #​2774
• Failing no-op implementations for several UI functions by @​justsmth in #​2772
• Tool util functions in tool_util.cc by @​justsmth in #​2778
• AES-XTS on AArch64: Set w19 earlier before cipher-stealing of 1 block + tail. by @​nebeid in #​2785
• Prepare release v1.63.0 by @​torben-hansen in #​2789

Bug fixes

• Fixed a bug in the AES-XTS-256 aarch64 architecture implementation. For input lengths of 17-31 bytes there was a 50% probability that an encryption operation would result in corrupted ciphertext. The resulting ciphertext would result in corrupted plaintext when performing a decrypt operation.

Full Changelog: aws/aws-lc@v1.62.1...v1.63.0

v1.62.1

Compare Source

Post release edit

• This release contains a bug in the AES-XTS implementation on aarch64 platforms affecting input lengths of 17 to 31 bytes.

What's Changed

• Implement ecparam CLI tool by @​kingstjo in #​2718
• CodeBuild Setup for GitHub Docker Image Builds by @​skmcgrail in #​2745
• Add Docker Image Build Workflows by @​skmcgrail in #​2746
• Add ecr:BatchImportUpstreamImage for first-time cache pull-thru by @​skmcgrail in #​2747
• Use New Docker Images in GitHub Workflows by @​skmcgrail in #​2752
• Add OPENSSL_NO_UI_CONSOLE macro by @​smittals2 in #​2751
• Cipher-stealing: no need for re-loading round keys; they're still in registers. by @​nebeid in #​2734
• Fix windows CI job by @​justsmth in #​2744
• Consolidate GitHub CodeBuild Projects by @​skmcgrail in #​2757
• Don't log feature probe error message unless requested by @​torben-hansen in #​2755
• Implement more options for x509 CLI by @​nhatnghiho in #​2735
• AWS CodeBuild Fleets Setup by @​skmcgrail in #​2758
• ci: scope down GitHub Token permissions by @​AdnaneKhan in #​2762
• Fix librelp integration CI by @​nhatnghiho in #​2766
• Implement -passin for dgst cli by @​nhatnghiho in #​2763
• AL2023 x509-limbo container by @​skmcgrail in #​2761
• Migrate Graviton2 and Graviton4 from EC2 Test Framework by @​skmcgrail in #​2759
• Add Windows Docker Image Build by @​skmcgrail in #​2760
• Do no consider warnings fatal in CPU Jitter for LTO build by @​torben-hansen in #​2769
• Add more options to genrsa by @​smittals2 in #​2770
• Prepare v1.62.1 by @​torben-hansen in #​2771

New Contributors

• @​AdnaneKhan made their first contribution in #​2762

Full Changelog: aws/aws-lc@v1.62.0...v1.62.1

v1.62.0

Compare Source

Post release edit

• This release contains a bug in the AES-XTS implementation on aarch64 platforms affecting input lengths of 17 to 31 bytes.

What's Changed

• nginx now supports AWS-LC by @​samuel40791765 in #​2714
• Fix tests that assume X25519 will be negotiated by @​alexw91 in #​2682
• Fixing a bug in ML-DSA poly_uniform function by @​dkostic in #​2721
• Migrate integration omnibus by @​skmcgrail in #​2715
• Delete util/bot directory by @​justsmth in #​2723
• Don't ignore CMAKE_C_FLAGS w/ MSVC by @​justsmth in #​2722
• Bump urllib3 from 2.2.3 to 2.5.0 in /tests/ci by @​dependabot[bot] in #​2551
• Type fix in mldsa by @​manastasova in #​2308
• Centralize password handling tool-openssl by @​kingstjo in #​2555
• crypto/pem: replace strncmp with CRYPTO_memcmp to fix -Wstring-compare error by @​R3hankhan123 in #​2724
• Implement dgst CLI command by @​nhatnghiho in #​2638
• Add ASN.1 decoding for ML-KEM private keys as seeds by @​jakemas in #​2707
• Implement genrsa command by @​kingstjo in #​2535
• Move udiv and sencond tweak calculations to when needed by @​nebeid in #​2726
• Add null check on RSA key checks by @​samuel40791765 in #​2727
• Implement workaround for FORTIFY_SOURCE warning with jitterentropy by @​skmcgrail in #​2728
• Implement coverity suggestions by @​skmcgrail in #​2730
• Add minimal EC CLI tool implementation by @​kingstjo in #​2640
• Adding pkeyutl tool to the CLI by @​smittals2 in #​2575
• Add CI dimensions for legacy AVX512 flags by @​smittals2 in #​2732
• Fix Libwebsockets CI by @​smittals2 in #​2737
• Add option ENABLE_SOURCE_MODIFICATION by @​justsmth in #​2739
• Simple script to build/run tests by @​justsmth in #​2736
• Add build-time option to opt-out of CPU Jitter Entropy by @​torben-hansen in #​2733
• Prepare v1.62.0 by @​justsmth in #​2743

New Contributors

• @​R3hankhan123 made their first contribution in #​2724

Full Changelog: aws/aws-lc@v1.61.4...v1.62.0

v1.61.4

Compare Source

What's Changed

• Pin PyCA version in python integration tests by @​WillChilds-Klein in #​2706
• Migrate linux-x86 jobs to self-hosted runners by @​skmcgrail in #​2708
• Migrate Linux ARM omnibus by @​skmcgrail in #​2711
• Fixes for android CI tests by @​nhatnghiho in #​2713
• Check compiler for 'linux/random.h' by @​justsmth in #​2716
• Prepare 1.61.4 by @​justsmth in #​2717

Full Changelog: aws/aws-lc@v1.61.3...v1.61.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.