fix param encoding in pkcs12 pbamac encoding
add support for certificate compression in selfserv and tstclient

Fix missing and inaccurate key length checks
Fix chacha timing issue

Fix MD-5 decode issue in pkcs #12
turn off policy processing for pkcs12 and smime
restore the rhel9 pkcs12 defaults for pk12util

Rebase to NSS 3.101
restore ppc init support

Allow for shorter ecdsa signatures by padding them to full length

Fix ecc DER wrapping.

Pick up validated constant time implementations of p256, p384, and p521
More Fips indicator changes

FIPS review changes
add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
update the indicators for this release
allow hashing of longer than int32 values in a single PKCS #11 call.

Fix expired certs in tests
Fix CVE-2023-5388

add indicator for pbkdf
fix ems policy bug

fix release number

fix missing dist tag in packages version
move from deprecate %patch format

Rebase to NSS-3.90
Rebase to NSPR-3.35
fix incorrect version values in the NSS spec file for FIPS

fix memory leak, add generator test in FIPS mode.

fix consistency return errors. We shouldn't lock the FIPS

Add check for RSA PSS Salt required by FIPS
Update fips_algorithms.sh according to the review.