0.25.0 (stable) * add PKCS#11 3.0 support [PR#458, PR#461, PR#462, PR#463, PR#464, PR#467, PR#469, PR#470, PR#475, PR#485, PR#486] * add support for profile objects [PR#479] * add ability to adjust module and config paths at run-time via system environmental exports [PR#442] * make terminal output nicer [PR#509, PR#510] * p11-kit: add command to print merged configuration [PR#446, PR#489] * p11-kit: add commands to list, add and delete profiles of a token [PR#500, PR#503, PR#506] * trust: add command to check format of .p11-kit files [PR#476, PR#483] * virtual: fix libffi type signatures for PKCS#11 3.0 functions [PR#492] * server: fix umask setting when --group is specified [PR#478] * server: check SHELL only when neither --sh nor --csh is specified [PR#438] * rpc: use space string in C_InitToken [PR#514] * rpc: fix two off-by-one errors identified by asan [PR#456] * modules: make logging message more translatable [PR#436] * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms [PR#421] * pkcs11.h: add IBM specific mechanism and attributes [PR#415] * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms [PR#487] * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption [PR#481] * po: update translations from Transifex [PR#439] * bug and build fixes [PR#412, PR#414, PR#417, PR#418, PR#420, PR#426, PR#427, PR#428, PR#448, PR#451, PR#459, PR#496, PR#505, PR#511, PR#512, PR#513, PR#516, PR#517, PR#524, PR#521] * test fixes [PR#424, PR#441, PR#444, PR#443, PR#460, PR#472, PR#474, PR#465, PR#473, PR#487, PR#499, PR#519, PR#525, PR#526]