* Notice: Botan 3.7.0 will remove support for the currently
supported experimental Kyber r3 TLS ciphersuites, leaving only
the standardized ML-KEM suites.
* Fix a bug in x86 CPUID detection introduced in 3.6.0 which would
cause crashes on systems which have BMI1 but not BMI2.
(gh#randombit/botan#4401)
* Fix a bug in SLH-DSA signing, which did not default to the FIPS
required randomized variant. (gh#randombit/botan#4398)
* Modify how elliptic curve blinding is performed, reducing the
number of self-additions that may occur during multiplication.
* In speed command line utility, also iterate keygen several times.
