chore(deps): bump aws-lc-rs from 1.17.0 to 1.17.1 in the rust-patch group

[dependabot]

Bumps the rust-patch group with 1 update: aws-lc-rs.

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

• [Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)
• [Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

• In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

• Support linking against a system-installed AWS-LC:
  • Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @​justsmth in aws/aws-lc-rs#1129
  • Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @​justsmth in aws/aws-lc-rs#1143
  • Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @​justsmth in aws/aws-lc-rs#1156
  • Gate system AWS-LC on a declared minimum version by @​justsmth in aws/aws-lc-rs#1152
• Implement Send/Sync for RSA hazmat encryption key types by @​justsmth in aws/aws-lc-rs#1128
• Add Salt::none constructor for HKDF by @​justsmth in aws/aws-lc-rs#1135
• Add wasm32-unknown-emscripten build and test support by @​justsmth in aws/aws-lc-rs#1059
• Report specific key rejection reasons for invalid RSA key sizes by @​justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

• ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @​jakemas in aws/aws-lc#3195 and aws/aws-lc#3219
• Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

• Fix memcmp_check build failure when CFLAGS contains LTO flags by @​justsmth in aws/aws-lc-rs#1134
• Fix missing poly_Rq_mul symbol in Linux x86_64 build by @​Lebei2046 in aws/aws-lc-rs#1130
• Apply -ffile-prefix-map to jitterentropy builder by @​justsmth in aws/aws-lc-rs#1139
• Select compiler flag dialect by driver mode, not target ABI by @​justsmth in aws/aws-lc-rs#1147

Issues Being Closed

• RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125
• RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082
• Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132
• cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146
• Support system-provided AWS-LC library -- aws/aws-lc-rs#936
• cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108
• jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

• Add ML-DSA aarch64 native assembly to CC builder scripts by @​jakemas in aws/aws-lc-rs#1113
• Clarify HKDF info concatenation and encoding responsibility by @​justsmth in aws/aws-lc-rs#1145
• CI: support zig cross compile for arm32 by @​justsmth in aws/aws-lc-rs#1124
• fix(clippy): fix truncate warnings by @​justsmth in aws/aws-lc-rs#1126
• ci: replace dtolnay/rust-toolchain with direct rustup invocations by @​justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

• 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
• e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
• bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
• 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
• 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
• a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
• 00e016a Bump actions/checkout from 6 to 7 (#1157)
• e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
• dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
• 26838da rsa: report specific key rejection for invalid sizes (#1153)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like aws-lc-rs is no longer updatable, so this is no longer needed.