- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]

{ panic("ecdsa: reseed interval exceeded") } tlen := 0 for tlen < len(out) { // V = HMAC_K(V) // T = T || V d.hK.Reset() d.hK.Write(d.V) d.V = d.hK.Sum(d.V[:0]) tlen += copy(out[tlen:], d.V) } // Note that if this function shows up on ECDSA-level profiles, this can be // optimized in the common case by deferring the rest to the next Generate // call, which will never come in nearly all cases. // HMAC_DRBG_Update, per Section 10.1.2.2, without provided_data. // K = HMAC (K, V || 0x00) d.hK.Reset()...

{ panic("ecdsa: reseed interval exceeded") } tlen := 0 for tlen < len(out) { // V = HMAC_K(V) // T = T || V d.hK.Reset() d.hK.Write(d.V) d.V = d.hK.Sum(d.V[:0]) tlen += copy(out[tlen:], d.V) } // Note that if this function shows up on ECDSA-level profiles, this can be // optimized in the common case by deferring the rest to the next Generate // call, which will never come in nearly all cases. // HMAC_DRBG_Update, per Section 10.1.2.2, without provided_data. // K = HMAC (K, V || 0x00) d.hK.Reset()...