Update module github.com/cloudflare/circl to v1.6.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cloudflare/circl	v1.6.3 → v1.6.4

---

Release Notes

cloudflare/circl (github.com/cloudflare/circl)

v1.6.4: CIRCL v1.6.4

Compare Source

What's Changed

• Fix typo: it's to its by @​04cb in #​588
• ci: Bump Go version to 1.26 by @​armfazh in #​591
• tss/rsa: polynomial evaluation using Horner's method by @​armfazh in #​590
• zk/qndleq: Ensure large security parameter by @​armfazh in #​592
• sign/bls: rejects aggregated signatures built with duplicated messages. by @​armfazh in #​595
• Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @​dependabot[bot] in #​585
• tss/rsa: avoiding overflow in lambda calculation with big.Int by @​armfazh in #​598
• deps: Update CIRCL version in code generators. by @​armfazh in #​599
• ci: add Semgrep OSS scanning workflow by @​hrushikeshdeshpande in #​601
• zk/qndleq: Fixes challenge calculation by @​armfazh in #​596
• sign/bls: Check that signature cannot be the identity point by @​armfazh in #​603
• ml-dsa: Don't use tr pointer by @​bwesterb in #​606
• ecc/bls12381: affinize must handle identity elements. by @​armfazh in #​604
• pki: check pem.Decode returned nil block. by @​z9z in #​607
• abe/cpabe/tkn20: fix AND-gate secret sharing. by @​cjpatton in #​610
• hpke: fix verifyPSKInputs() to match spec. by @​cjpatton in #​612
• hpke: Warn about nonce misuse during marshaling by @​cjpatton in #​613
• hpke: don't panic when parsing on hybrid keys/ciphertexts. by @​cjpatton in #​614
• blindsign/blindrsa: reject non-canonical signatures. by @​cjpatton in #​615
• blindsign/blindrsa: reject message unless co-prime with modulus by @​cjpatton in #​616
• oprf: reject identity element as public key. by @​cjpatton in #​619
• Add AGENTS.md and REVIEW.md for contributor and AI agent guidance by @​dotjs in #​620
• ecc/bls12381: check input length for infinity encoding in SetBytes. by @​bwesterb in #​618
• abe/cpabe/tkn20: bound recursion depth when parsing policies. by @​cjpatton in #​622
• abe/cpabe/tkn20: reject ciphertexts with trailing data. by @​cjpatton in #​621
• abe/cpabe/tkn20: handle short ciphertexts as errors. by @​cjpatton in #​611
• abe/cpabe/tkn20: enforce wire count matches policy. by @​cjpatton in #​624
• abe/cpabe/tkn20: handle malformed ciphertext header. by @​cjpatton in #​623
• abe/cpabe/tkn20: reject circuits with invalid topologies. by @​cjpatton in #​625
• Release CIRCL v1.6.4 by @​cjpatton in #​626

New Contributors

• @​04cb made their first contribution in #​588
• @​z9z made their first contribution in #​607
• @​dotjs made their first contribution in #​620

Full Changelog: cloudflare/circl@v1.6.3...v1.6.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.