chore(deps): bump github.com/emmansun/gmsm from 0.44.1 to 0.45.0 in the minor-and-patch group

[dependabot]

Bumps the minor-and-patch group with 1 update: github.com/emmansun/gmsm.

Updates github.com/emmansun/gmsm from 0.44.1 to 0.45.0

Release notes

Sourced from github.com/emmansun/gmsm's releases.

v0.45.0（2026-10-04）

Massive RISC-V 64 vector-extension support across the library, a Go 1.26 baseline upgrade, and several security and correctness fixes.

Highlights

• RISC-V 64 (RVV 1.0 + Zvk) vector acceleration for ML-KEM, ML-DSA, SM4 (GCM/CTR/XTS), SM3, ZUC, GCM-SIV, SM2/SM9/BN256
• Go 1.26 baseline (riscv64 vector crypto paths require Go 1.27+)
• smx509 upgraded to the Go 1.26 stdlib baseline, with Go 1.27 PKIX name formatting support
• Security and correctness fixes: pkcs7 out-of-bounds read on truncated BER, SM9 key-wrap ciphertext length checks, multiple XTS fixes

What's Changed

RISC-V 64 vector implementations

ML-KEM (mlkem)

• Full RVV optimization: NTT / inverse NTT (incl. mulAcc / keygen paths), ring compress & encode (1/4/5/10/11-bit), decodeAndDecompress, samplePolyCBD, rejUniform, polynomial add/sub, with benchmarks (d0c786dd, ec56802c, 95134421, 51c4c2e7, baf78858, 12a28366, 6d644b2b, e288343b, e4be80cf, ...)
• Keccak-x4 integration and VLEN>128 (M1 layout) support (2be6cccf, 979c2bb4)

ML-DSA (mldsa)

• RVV optimization: NTT, nttMatRowVecMul, hint make/use & decompose, infinity norm, bit pack/unpack (encode/decode), with benchmarks (2eb3546f, b96c65b5, 320bfdca, 30d9971e, 8df409e6, 262b1f29, ...)

SM4 (internal/sm4)

• GCM with Zvbc carry-less multiply and Zvkg GHASH paths, including gcm init/data/finish rework and tail optimizations (362eedf1, a2378679, dd1cc459, 27f39363, ...)
• CTR mode via Zvksed (33934a6b, fba89f6b, ...)
• XTS mode via Zvksed (ea482c59), incl. VLEN>128 fix (a179e573)

SM3 (internal/sm3)

• Zvksh vector path using word instructions for go1.27 compatibility (fdaca36f, e7f02778, 63015b2a)

ZUC (internal/zuc)

• riscv64 EEA / EIA-256 using Zvbb (d9da06a9, b652bbd6, 0cefb3f7, 12f0066b, ...)

GCM-SIV (internal/cipher/gcmsiv)

• riscv64 Zvkg/Zvbc POLYVAL & mulX_GHASH (fe1ebc48, a9cd77a1, ...)

XTS (internal/cipher/xts)

• riscv64 mul2Asm / doubleTweaksAsm incl. GB variant (41e6dcef, 22534839, f9ce8029, ...)

Other primitives

• internal/sm2ec: RVV select primitives with scalar health-check fallback (9bf4fac3, ecb4b776, 96d172c5, 95fc884b)
• internal/sm9, bn256: RVV select & memory copy, optimized MOVCOND64 (852890f8, e4834d3b)
• internal/keccakx4: riscv64 support, M1 for VLEN>128 (4d555840, 979c2bb4)
• internal/deps/cpu: detect RISC-V VLENB and Zvbb/Zvkb/Zvbc/Zvkg/Zvksed/Zvksh features (bc08516d, e97e7a68, 201a3fc4)

Other platforms

• internal/sm3: LoongArch LASX/LSX optimizations — matrix transpose, VEXTRINSW in LSX schedule (0bc79ed9, ea9e7849, d9958439)
• mldsa, mlkem: loong64 native XVPERMIQ/XVSHUFB instructions (fdc2e074)
• smx509: upgrade to Go 1.26 baseline (#629), support Go 1.27 PKIX name formatting (24224d0d)

Performance

... (truncated)

Commits

• 4328ff9 Merge pull request #634 from emmansun/develop
• 977a0c4 Merge pull request #616 from emmansun/dependabot/go_modules/develop/golang.or...
• 843b0d2 build(deps): bump golang.org/x/crypto from 0.55.0 to 0.57.0
• e298a25 Merge pull request #633 from emmansun/main
• fdc2e07 mldsa,mlkem: use native instructions for XVPERMIQ XVSHUFB
• 5f99469 docs: add dixyes as a contributor for bug
• 1db6186 doc: align contributors
• 97a35ce Merge pull request #631 from emmansun/all-contributors/add-rajnisht7
• 9ed0e94 Merge branch 'develop' into all-contributors/add-rajnisht7
• 1c5f938 Merge pull request #630 from emmansun/all-contributors/add-ligefeiBouncycastle
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions