| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Harden Constant-Time Crypto and Secret Handling Reduce timing and data-remanence exposure across BN, symmetric, asymmetric, post-quantum, PAKE, PKCS#12, CLI, and TLS code. Bound PKCS#1 v1.5 type 2 decoding for short inputs and use one masked decoder for TLS and non-TLS paths. Restrict SPAKE2+ responder registration data and add validation modes. Harden cryptographic arithmetic and sensitive-data cleanup. Extend regression coverage for ECC field operations, scalar multiplication, and RSA decoding boundaries. Remove the deprecated RSA-BSSA factor injection control. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1906 | 14 天前 | |
feat(bsl): implement the async framework core and SAL coroutine backends Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1922 | 3 天前 | |
Complete HSS and PQC verification support Align HSS public keys and multi-level verification with RFC 8554. Extend X.509 and CMS interoperability coverage for hash-based keys. Reject unsupported CMS digests and invalid keyCertSign usage. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1855 | 4 天前 | |
Complete HSS and PQC verification support Align HSS public keys and multi-level verification with RFC 8554. Extend X.509 and CMS interoperability coverage for hash-based keys. Reject unsupported CMS digests and invalid keyCertSign usage. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1855 | 4 天前 | |
feat: add TLS protocol transparent async capability Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1918 | 13 天前 |