Merge branch 'arm64-sha1' into master-updates

diff --cc ChangeLog
index eadfc36aef45093b6cd2bf26e09092c9f06041f2,7bd8e625adbe5522c7cf5ab93f16c2c3f76469a1..43ffdcd1f6b4fdd3665229df194313aa618bb066
--- 1/ChangeLog
--- 2/ChangeLog
+++ b/ChangeLog
@@@ -1,34 -1,25 +1,56 @@@
+ 2021-07-08  Niels Möller  <nisse@lysator.liu.se>
+ 
+       * configure.ac (FAT_TEST_LIST): Add sha2 to aarch64 fat tests.
+ 
+       From Mamone Tarsha:
+       * arm64/fat/sha256-compress-2.asm: New file.
+       * arm64/crypto/sha256-compress.asm: New file.
+       * fat-arm64.c: Add setup for nettle_sha1_compress.
+ 
+ 2021-06-30  Niels Möller  <nisse@lysator.liu.se>
+ 
+       * configure.ac (FAT_TEST_LIST): Add sha1 to aarch64 fat tests.
+ 
+       From Mamone Tarsha:
+       * fat-arm64.c: Add setup for nettle_sha1_compress.
+       * arm64/fat/sha1-compress-2.asm: New file.
+ 
+ 2021-06-01  Niels Möller  <nisse@lysator.liu.se>
+ 
+       From Mamone Tarsha:
+       * arm64/crypto/sha1-compress.asm: New file.
+ 
 +2021-05-17  Niels Möller  <nisse@lysator.liu.se>
 +
 +      Bug fixes merged from from 3.7.3 release (starting from 2021-05-06).
 +      * rsa-decrypt-tr.c (rsa_decrypt_tr): Check up-front that input is
 +      in range.
 +      * rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
 +      * rsa-decrypt.c (rsa_decrypt): Likewise.
 +      * testsuite/rsa-encrypt-test.c (test_main): Add tests with input > n.
 +
 +2021-05-14  Niels Möller  <nisse@lysator.liu.se>
 +
 +      * rsa-sign-tr.c (rsa_sec_blind): Delete mn argument.
 +      (_rsa_sec_compute_root_tr): Delete mn argument, instead require
 +      that input size matches key size. Rearrange use of temporary
 +      storage, to support in-place operation, x == m. Update all
 +      callers.
 +
 +      * rsa-decrypt-tr.c (rsa_decrypt_tr): Make zero-padded copy of
 +      input, for calling _rsa_sec_compute_root_tr.
 +      * rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
 +
 +      * testsuite/rsa-encrypt-test.c (test_main): Test calling all of
 +      rsa_decrypt, rsa_decrypt_tr, and rsa_sec_decrypt with zero input.
 +
 +2021-05-06  Niels Möller  <nisse@lysator.liu.se>
 +
 +      * pkcs1-sec-decrypt.c (_pkcs1_sec_decrypt): Check that message
 +      length is valid, for given key size.
 +      * testsuite/rsa-sec-decrypt-test.c (test_main): Add test cases for
 +      calls to rsa_sec_decrypt specifying a too large message length.
 +
  2021-05-23  Niels Möller  <nisse@lysator.liu.se>
  
        From Nicolas Mora: Implement aes key wrap and key unwrap (RFC 3394).