C++ compat

Revert "local-dynamic is enough"

Remove ctype usage

Refactor IPv6 zone ID parsing and reject malformed zone identifiers

gcc on FreeBSD can produce bogus code for isspace

defined _AIX -> defined(_AIX)

Define TLS as _Thread_local only if not properly autoconfigured

Use AC_COMPILE_IFELSE → AC_LINK_IFELSE in ax_tls.m4

Some AIX versions define a macro named ip_len

Revert "No need to include the hkdf headers twice"

Add AI policy

Properly test crypto_kdf_hkdf_sha*_keygen

base64: reject signed chars

No need to include the hkdf headers twice

Avoid an MSVC warning in sodium_base64_ENCODED_LEN macro