.. _mozilla_projects_nss_nss_3_118_release_notes:

NSS 3.118 release notes
========================

`Introduction <#introduction>`__
--------------------------------

.. container::

   Network Security Services (NSS) 3.118 was released on *18 November 2025**.

`Distribution Information <#distribution_information>`__
--------------------------------------------------------

.. container::

   The HG tag is NSS_3_118_RTM. NSS 3.118 requires NSPR 4.37 or newer.

   NSS 3.118 source distributions are available on ftp.mozilla.org for secure HTTPS download:

   -  Source tarballs:
      https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_118_RTM/src/

   Other releases are available :ref:`mozilla_projects_nss_releases`.

.. _changes_in_nss_3.118:

`Changes in NSS 3.118 <#changes_in_nss_3.118>`__
------------------------------------------------------------------

.. container::

   - Bug 1994866 - Remove four Commscope root certificates from NSS.
   - Bug 1996036 - fix try pushes with --nspr-patch to actually apply the patch.
   - Bug 1995512 - Support for NIST Curves compressed points.
   - Bug 1985058 - Destroy certificate on error paths.
   - Bug 1990242 - Move NSS DB password hash away from SHA-1.
   - Bug 1983313 - support secp384r1mlkem1024.
   - Bug 1991549 - vendor latest ML-KEM code from libcrux.
   - Bug 1991549 - add mlk-kem-1024 tests.
   - Bug 1996717 - use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test.
   - Bug 1766767 - Move scripts to python3.
   - Bug 1983313 - add mlkem1024 support in freebl.
   - Bug 1983313 - support secp256r1mlkem768.
   - Bug 1983313 - Make mlkem768x25519 the default.
   - Bug 1983320 - ML-DSA SGN and VFY interfaces.
   - Bug 1988625 - Align FIPS interfaces count with array.
   - Bug 1989477 - Ensure CKK_ML_KEM has derive CK_FALSE.
   - Bug 1992128 - Add script for tagging an NSS release.
   - Bug 1992128 - Remove the globals from nss-release-helper.py.
   - Bug 1992128 - Add release helper command for generating the release index.
   - Bug 1992128 - Add release helper command for generating a release note.
   - Bug 1992128 - Add release helper command for freezing a branch.