chore(deps): bump aws-lc-rs from 1.17.0 to 1.17.1

[dependabot]

Bumps aws-lc-rs from 1.17.0 to 1.17.1.

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

• [Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)
• [Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

• In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

• Support linking against a system-installed AWS-LC:
  • Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @​justsmth in aws/aws-lc-rs#1129
  • Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @​justsmth in aws/aws-lc-rs#1143
  • Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @​justsmth in aws/aws-lc-rs#1156
  • Gate system AWS-LC on a declared minimum version by @​justsmth in aws/aws-lc-rs#1152
• Implement Send/Sync for RSA hazmat encryption key types by @​justsmth in aws/aws-lc-rs#1128
• Add Salt::none constructor for HKDF by @​justsmth in aws/aws-lc-rs#1135
• Add wasm32-unknown-emscripten build and test support by @​justsmth in aws/aws-lc-rs#1059
• Report specific key rejection reasons for invalid RSA key sizes by @​justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

• ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @​jakemas in aws/aws-lc#3195 and aws/aws-lc#3219
• Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

• Fix memcmp_check build failure when CFLAGS contains LTO flags by @​justsmth in aws/aws-lc-rs#1134
• Fix missing poly_Rq_mul symbol in Linux x86_64 build by @​Lebei2046 in aws/aws-lc-rs#1130
• Apply -ffile-prefix-map to jitterentropy builder by @​justsmth in aws/aws-lc-rs#1139
• Select compiler flag dialect by driver mode, not target ABI by @​justsmth in aws/aws-lc-rs#1147

Issues Being Closed

• RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125
• RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082
• Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132
• cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146
• Support system-provided AWS-LC library -- aws/aws-lc-rs#936
• cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108
• jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

• Add ML-DSA aarch64 native assembly to CC builder scripts by @​jakemas in aws/aws-lc-rs#1113
• Clarify HKDF info concatenation and encoding responsibility by @​justsmth in aws/aws-lc-rs#1145
• CI: support zig cross compile for arm32 by @​justsmth in aws/aws-lc-rs#1124
• fix(clippy): fix truncate warnings by @​justsmth in aws/aws-lc-rs#1126
• ci: replace dtolnay/rust-toolchain with direct rustup invocations by @​justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

• 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
• e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
• bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
• 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
• 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
• a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
• 00e016a Bump actions/checkout from 6 to 7 (#1157)
• e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
• dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
• 26838da rsa: report specific key rejection for invalid sizes (#1153)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)