Impose limits to HMAC and KMAC key size to be at least 112 bits

[paulidale]

Restrict HMAC and KMAC key sizes below 112 bits. There is no official guidance on this but it is something KeyPair has learnt from the CMVP.

This will need to be optional but enforced with the pedantic setting.

[slontis]

Not sure why openssl/openssl#22256 was closed

[slontis]

If these become configurable then indicators may be necessary

[t8m]

If these become configurable then indicators may be necessary

We do not have indicators for the other configurable checks.

[paulidale]

We need indicators. The current approach to the 140-3 approval is not sustainable.
I've a good idea how to do them but it will take a fair amount of effort to implement.

[slontis]

openssl/openssl#23833 is kind of related (HKDF self test changed to use 112 bit key)

[nhorman]

This is currently blocked on our FIPS 140-3 indicator design