Ai security 2 - #138

Open

lauris71 wants to merge 58 commits into

open-eid:masterfrom

lauris71:ai-security

Commits on May 20, 2026

Some fixes from ai security audit
Lauris Kaplinski
committed
53a6898

Commits on May 22, 2026

Fixed cdoc-tool index usage
Lauris Kaplinski
committed
47715fe

Commits on May 25, 2026

Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
fef2389
Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
8848542

Commits on May 26, 2026

Some more AI issue fixes
Lauris Kaplinski
committed
bf5ca62

Commits on May 27, 2026

Hardcode SSL timeout
Lauris Kaplinski
committed
0a6b12b
Fixed xstream uint overflow and tool logging
Lauris Kaplinski
committed
a4dafb9
Some more fixes
Lauris Kaplinski
committed
8c9b789
Secure tool key handling, use explicid compile time definitions for key dump and TLS diabling
Lauris Kaplinski
committed
e9a8a6e
Fixed potential tar size overflow and secured proxy password
Lauris Kaplinski
committed
fa288ee
Windows build fix
Lauris Kaplinski
committed
b89e4f1
Revert proxy password for now
Lauris Kaplinski
committed
d0e0c90

Commits on May 29, 2026

Make proxy password string_view
Lauris Kaplinski
committed
87d1547

Commits on Jun 1, 2026

Disable potential Bleichenbacher attack for CDoc1 RSA encryption
Lauris Kaplinski
committed
3631991
Moved fix to main decryptRSA method
Lauris Kaplinski
committed
7e6cdaa
Added ct.h
Lauris Kaplinski
committed
f01510a
Bleichenbacher fix for NCrypt backend
lauris71
committed
0aec4a1
Some cleanups
Lauris Kaplinski
committed
6f37761

Commits on Jun 5, 2026

All C,H & M fixes from Caludo Opus review
Lauris Kaplinski
committed
cc19133
Merge branch 'open-eid:master' into master
lauris71
authored
6bd12a8
Update cdoc-tool
Lauris Kaplinski
committed
8102224

Commits on Jun 11, 2026

Merge branch 'open-eid:master' into master
lauris71
authored
c3d8dd2
Merge branch 'master' into ai-security
Lauris Kaplinski
committed
bb9945c
Make default KDF iter 600000
Lauris Kaplinski
committed
08ca9e5

Commits on Jun 16, 2026

Added std_string_view.i
Lauris Kaplinski
committed
004ce57
Fixed label parsing on Ubuntu 22
Lauris Kaplinski
committed
212825a

Commits on Jun 17, 2026

Include <string.h>
Lauris Kaplinski
committed
6db3372
Use explicit_bzero on glibc
Lauris Kaplinski
committed
8a2f494
Use SecureZeroMemory on windows
Lauris Kaplinski
committed
573f147
Use OPENSSL_cleanse for secure cleanup
Lauris Kaplinski
committed
2d552cb
Fixed inverted constant-time comparison
Lauris Kaplinski
committed
f63ed77
Merge branch 'open-eid:master' into master
lauris71
authored
a6fc79a
Merge commit 'a6fc79ad2e3c4d9d34157742f84db1c0c25faca3' into ai-security
Lauris Kaplinski
committed
88f1fa7

Commits on Jul 2, 2026

Update cdoc/CDocCipher.cpp
metsma
authored
c0626a0
Fixed PKCS11 and NCrypt RSA handling and check all random() calls for success
Lauris Kaplinski
committed
0e544fc

Commits on Jul 3, 2026

Fixed PKCS11 public key loading
Lauris Kaplinski
committed
3e62abe
Merge branch 'open-eid:master' into master
lauris71
authored
68cc522

Commits on Jul 15, 2026

Fixed label UTF-8 escaping if locale is not C
Lauris Kaplinski
committed
5769447
Merge branch 'open-eid:master' into master
lauris71
authored
a7b7c6b
Fixed label generation for non-C locales
Lauris Kaplinski
committed
1225355
Merge branch 'master' of github.com:lauris71/libcdoc
Lauris Kaplinski
committed
4ba85f1

Commits on Jul 24, 2026

Merge branch 'open-eid:master' into master
lauris71
authored
e5ac2a3
Merge branch 'master' into ai-security
Lauris Kaplinski
committed
463bfd5
Added SecureTarget class
Lauris Kaplinski
committed
dc23ffa

Commits on Jul 27, 2026

Fixed N1 (out-of-bounds read) from 2026-07 report
Lauris Kaplinski
committed
139d1a7
Added Utils.cpp to test build
Lauris Kaplinski
committed
e37902c
Delete reader and writer in TestPasswordWithlabel
Lauris Kaplinski
committed
e7ad099
Clean up z_stream on zlib errors
Lauris Kaplinski
committed
5743645
Fixed N3 (base64 decode throws on errors) from 202607 report
Lauris Kaplinski
committed
6ae5ab9

Commits on Aug 17, 2026

Minor fixes: removed AES-CBC, N4, N5
Lauris Kaplinski
committed
e2d7828
fixed N7 (zstream max size), N8 (PBKDF limits), N9 (logging), N10 (throttle per key)
Lauris Kaplinski
committed
b47770c
Added comment about N12 (OpenSSL fast-path timing), fixed N13 (decodeBase64 finalising), N14 (OID buffer overflow), N15 (getInt throwing)
Lauris Kaplinski
committed
662da29
Fixed N17 (time parsing errors) and N18 (clean FMK in CDocCipher)
Lauris Kaplinski
committed
311be5b

Commits on Aug 18, 2026

Fixed N20 (handle exactly 100 byte tar filenames), N21 (treat PKCS11 cacncel as error), N22 (securely clear shared secret), N23 (handle io failure properly),N24 (handle utf8 properly in filename sa…
Lauris Kaplinski
committed
fb37985
Minor logging cleanups
Lauris Kaplinski
committed
0892d09
fixed libcoc::LOG...
Lauris Kaplinski
committed
9743447
Remove apostrofes from numberl literals
Lauris Kaplinski
committed
11bfdad
Use swig workaround for new configuration keys
Lauris Kaplinski
committed
dce0136