文件最后提交记录最后更新时间
fix: Fix reset AES-WRAP IV state issue Signed-off-by: dsy678 <dongshunyu1@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/155325 天前
fix: bn copy and dup without flag information Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/13521 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Fix code review issues Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/13741 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
feat:add composite-mldsa codec Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/11081 个月前
feat(crypto/benchmark/chore): Add x25519 armv8 NEON interleave implementation - Add x25519 armv8 NEON interleave implementation - Refactor benchmark framework to support multiple benchmark methods - CMake now supports user overwrite option and merge to preset profiles - Update related docs Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/12831 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
revert: drop extra drbg deinit changes Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14721 个月前
Fixed missing validation and memory issues Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/15976 天前
test: Add read/write boundary test cases for symmetric and hash assembly optimizations. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14551 个月前
Standardize the naming of external structures Co-authored-by: jchx<chenqi180@huawei.com> # message auto-generated for no-merge-commit merge: !1146 merge cms into main Standardize the naming of external structures Created-by: jchx Commit-by: jchx Merged-by: liwei3013 Description: <!-- 感谢您提交 Pull Request!以下是一些提示: 1) 如果您是第一次提交,请阅读我们的贡献者指南:https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **此 PR 的作用 / 为什么需要它**: **自检清单**: - [ ] **测试**:代码是否已有UT/ST测试用例覆盖,新增测试用例是否随本PR一并上库 - [ ] **接口**:是否涉及对外接口变更,变更已通过接口评审 - [ ] **文档**:是否涉及文档修改 <!-- **给审查者的特别说明**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!11463 个月前
fix: remove redundant macro definitions in ecc test suite Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/152228 天前
Clean up code compilation warnings Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/13211 个月前
Reject RSA private key encoding without public exponent Add a check to fail RSA private key encoding when e is missing or zero, and add an SDV test for n+d only keys Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/160210 天前
fix: harden entropy/rand handling and CMS streaming verification Add timestamp entropy startup auto-tests and related SDV coverage, preserve seed DRBG lock and rand fallback across provider/libctx teardown, and fix detached CMS streaming verification without signedAttrs while aligning key checks and build dependencies. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14281 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
refactor: decouple XMSSMT from XMSS and fix XDR dispatch - Introduce independent HITLS_CRYPTO_XMSSMT build macro and separate XMSSMT algorithm dispatch (keymgmt/sign tables, method registration) - Fix XMSSMT certificate verification failure caused by shared CRYPT_PKEY_XMSS type (pkeyGetId/signAlg asymId mismatch) - Fix XDR OID namespace collision with dedicated CRYPT_CTRL_SET_XMSSMT_XDR_ALG_TYPE control code - Add thread safety and stateful signing documentation - Add h > XMSS_MAX_H parameter validation - Cleanse sensitive temp buffers in WOTS+ and hash signing paths - Add XMSSMT X.509 cert test data from RFC 9802 Appendix C (XMSSMT-SHA2_20/2_256) and parameterize pubkey test to verify independent CRYPT_PKEY_XMSSMT dispatch for cert parsing, public key extraction, and XDR algorithm type retrieval LMS: - Add n == 0 and n > LMS_MAX_HASH validation in signature parsing Hybrid KEM: - Cleanse shared secret on error path in Encaps/Decaps - Add API documentation for Encaps/Decaps clarifying raw output Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/157018 天前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
fix: XMSS/XMSSMT build guards, deps, and repeated SetParaById checks - Guard XMSSMT-specific decoder refs with proper #ifdef - Fix continuation line indent - Add HITLS_CRYPTO_PKEY_SIGN dependency for XMSS/XMSSMT - Include stdbool.h in xmss_params.h - Add repeated SetParaById check for XMSS/SLH-DSA/LMS/HSS Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/158815 天前
fix:fix issues of mceliece and rsa Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/151729 天前
Standardize the naming of external structures Co-authored-by: jchx<chenqi180@huawei.com> # message auto-generated for no-merge-commit merge: !1146 merge cms into main Standardize the naming of external structures Created-by: jchx Commit-by: jchx Merged-by: liwei3013 Description: <!-- 感谢您提交 Pull Request!以下是一些提示: 1) 如果您是第一次提交,请阅读我们的贡献者指南:https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **此 PR 的作用 / 为什么需要它**: **自检清单**: - [ ] **测试**:代码是否已有UT/ST测试用例覆盖,新增测试用例是否随本PR一并上库 - [ ] **接口**:是否涉及对外接口变更,变更已通过接口评审 - [ ] **文档**:是否涉及文档修改 <!-- **给审查者的特别说明**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!11463 个月前
fix: validate ML-DSA Mu message length Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/154924 天前
fix(crypto/bsl): fix bsl and ml-kem security check Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14241 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
feat: Add PQC certificate support to the protocol layer Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/157414 天前
feat(sm9): remove key exchange capability Remove all SM9 key exchange functionality including algorithm implementation, EAL layer, CTRL commands, test cases, and cmake options. Sign and encrypt operations remain fully functional. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14001 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
fix: harden length-bounded parsing edge cases - Reject unsupported ASN.1 indefinite length marker with explicit comment. - Tighten Base64 DecodeFinal validation for remain and paddingCnt combinations. - Remove redundant SQUEEZE state checks from MD multi-buffer paths. - Add SDV coverage for Base64 final-block matrix, PemMemStr boundaries, cert/key no-NUL parsing, UNKNOWN PEM/DER cert/key parsing through normal and provider APIs, and SipHash Deinit. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/13201 个月前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
fix: harden length-bounded parsing edge cases - Reject unsupported ASN.1 indefinite length marker with explicit comment. - Tighten Base64 DecodeFinal validation for remain and paddingCnt combinations. - Remove redundant SQUEEZE state checks from MD multi-buffer paths. - Add SDV coverage for Base64 final-block matrix, PemMemStr boundaries, cert/key no-NUL parsing, UNKNOWN PEM/DER cert/key parsing through normal and provider APIs, and SipHash Deinit. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/13201 个月前
fix: XMSS/XMSSMT build guards, deps, and repeated SetParaById checks - Guard XMSSMT-specific decoder refs with proper #ifdef - Fix continuation line indent - Add HITLS_CRYPTO_PKEY_SIGN dependency for XMSS/XMSSMT - Include stdbool.h in xmss_params.h - Add repeated SetParaById check for XMSS/SLH-DSA/LMS/HSS Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/158815 天前
fix:fix sm2 sign tests with stub functions Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/159814 天前
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/10861 个月前
Fix the issue where SM4-HCTR context copying still copies by default 4096 bytes after the internal cache expansio Fix the issue where SM4-HCTR context copying still copies by default 4096 bytes after the internal cache expansion, and instead copy and release based on the actual dataBuffer.bufSize of the source context. Also, add regression test cases for CipherDupCtx + Final when the cache size exceeds the default. Synchronize the correction of the relative paths in the macOS SDV reproduction commands in the Chinese and English test guides, changing from entering the script directory from the build directory to cd .. /testcode/script Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14291 个月前
feat(sm9): remove key exchange capability Remove all SM9 key exchange functionality including algorithm implementation, EAL layer, CTRL commands, test cases, and cmake options. Sign and encrypt operations remain fully functional. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/14001 个月前
fix(xmss): harden BDS state persistence and import Encode BDS state using a stable fixed-field big-endian format. Validate imported state and commit private key updates atomically. Add persistence, invalid-state, cross-layer and long-run tests. Signed-off-by: gengminqi <gengminqi@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/159113 天前