Fix timing side-channel in TLS RSA key exchange (#2162601)

fips: extend PCT to DH key generation (#2168143)

fips: rename hmac file to its previous name (#2148269)

cipher: add restriction on CCM tag length under FIPS mode (#2137807)
nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)

fips: make XTS key check failure not fatal (#2130971)
enable source archive verification again (#2127094)
clear server's session ticket indication at rehandshake (#2136072)
crypto-api: add block cipher API with automatic padding (#2084161)
fips: remove library path checking from FIPS integrity check (#2140908)

fips: mark PBKDF2 with short key and output sizes non-approved
fips: only mark HMAC as approved in PBKDF2
fips: mark gnutls_key_generate with short key sizes non-approved
fips: fix checking on hash algorithm used in ECDSA
fips: preserve operation context around FIPS selftests API

Supply --with{,out}-{zlib,brotli,zstd} explicitly

Revert nettle version pinning as it doesn't work well in side-tag

Pin nettle version in Requires when compiled with FIPS

Bundle GMP to privatize memory functions
Disable certificate compression support by default

Update gnutls-3.7.6-cpuid-fixes.patch

Mark RSA SigVer operation approved for known modulus sizes (#2091903)
accelerated: clear AVX bits if it cannot be queried through XSAVE

Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115244)
sysrng: reseed source DRBG for prediction resistance

Make gnutls-cli work with KTLS for testing
Fix double-free in gnutls_pkcs7_verify (#2109790)

Limit input size for AES-GCM according to SP800-38D (#2095251)
Do not treat GPG verification errors as fatal
Remove gnutls-3.7.6-libgnutlsxx-const.patch

Allow enabling KTLS with config file (#2042009)