main

Ggengminqifix(xmss): harden BDS state persistence and import

36cfc00f创建于 13 天前历史提交

文件	最后提交记录	最后更新时间
apps	feat(apps): refine enc command output and fixes Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1024	25 天前
auth	fix(auth): reject NULL ctx in HITLS_AUTH_OtpCtxCtrl Fix potential null pointer dereference risk in HITLS_AUTH_OtpCtxCtrl Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1168	2 个月前
bsl	Fixed missing validation and memory issues Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1597	6 天前
cmvp	crypto: remove unused FIPS provider and harden MdMB/RSA checks - remove fips_prov sources and HITLS_CRYPTO_CMVP_FIPS build/test wiring - keep CMVP selftest guards scoped to ISO19790 and SM providers - validate CRYPT_EAL_MdMB update/final state transitions - check RSA param value/valueLen before reading MD and MGF IDs Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1320	1 个月前
codecs	fix:Fixing some issues,See details for the list. List of issues: 1: The certificate time check is not considered an error if there is no callback return value of 0 at the lower level. 2: Some comment issues. 3: The provider initialization is not protected by a lock. 4: Some functions lack parameter checks. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1471	1 个月前
crypto	fix(xmss): harden BDS state persistence and import Encode BDS state using a stable fixed-field big-endian format. Validate imported state and commit private key updates atomically. Add persistence, invalid-state, cross-layer and long-run tests. Signed-off-by: gengminqi <gengminqi@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1591	13 天前
pki	Add SAN URI-ID and SRV-ID support for X.509 certificates Body Extend X.509 SAN handling to support URI-ID and SRV-ID per RFC 6125, including parsing, generation, and identity verification. Verification runs only when the corresponding SAN entries are present in the certificate. Add public verification helpers for URI-ID and SRV-ID, and register the id-on-dnsSRV OID for SRVName handling. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1592	6 天前
tls	Fix some code issues and comments 1、Fix macro wrapping of ParseHandShakeMSG function 2、Fix HITLS_CRYPT_Decrypt exception branch handling 3、Limit stored groups, key shares, and signature algorithms during parsing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1600	7 天前