| refactor: decouple XMSSMT from XMSS and fix XDR dispatch - Introduce independent HITLS_CRYPTO_XMSSMT build macro and separate XMSSMT algorithm dispatch (keymgmt/sign tables, method registration) - Fix XMSSMT certificate verification failure caused by shared CRYPT_PKEY_XMSS type (pkeyGetId/signAlg asymId mismatch) - Fix XDR OID namespace collision with dedicated CRYPT_CTRL_SET_XMSSMT_XDR_ALG_TYPE control code - Add thread safety and stateful signing documentation - Add h > XMSS_MAX_H parameter validation - Cleanse sensitive temp buffers in WOTS+ and hash signing paths - Add XMSSMT X.509 cert test data from RFC 9802 Appendix C (XMSSMT-SHA2_20/2_256) and parameterize pubkey test to verify independent CRYPT_PKEY_XMSSMT dispatch for cert parsing, public key extraction, and XDR algorithm type retrieval LMS: - Add n == 0 and n > LMS_MAX_HASH validation in signature parsing Hybrid KEM: - Cleanse shared secret on error path in Encaps/Decaps - Add API documentation for Encaps/Decaps clarifying raw output Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1570 | 18 天前 |