- remove tests of ansi_cprng
- apply change suggestions derived from Claude code
- kcapi-enc: add tag processing in decryption without ciphertext for completeness reason
- fix memory corruption (CVE-2026-71226)
- fix potential for an infinite loop (CVE-2026-71227)
- add safety measure to prevent IV reuse (CVE-2026-71225)