All pull requests

New pull request

Open

(42)

Closed

(2,104)

cmpv2: PkiFailureInfoValues are bit masks
#2470yuxi-liu-wired opened Oct 3, 2026Contributor
pkcs12: PBKDF2-params prf is DEFAULT algid-hmacWithSHA1
#2469yuxi-liu-wired opened Oct 3, 2026Contributor
cms: OneSymmetricKey sKeyAttrs is OPTIONAL
#2468yuxi-liu-wired opened Oct 3, 2026Contributor
cms: CertificateChoices other [3] is IMPLICIT
#2467yuxi-liu-wired opened Oct 3, 2026Contributor
crmf: tag non-CHOICE fields implicitly, as RFC 4211 defines
#2466yuxi-liu-wired opened Oct 3, 2026Contributor
cms: tag TimeStampedData / ERS types implicitly, as RFC 5544 and RFC 4998 define
#2465yuxi-liu-wired opened Oct 3, 2026Contributor
gss-api: tag RFC 2478 NegTokenInit fields explicitly
#2464yuxi-liu-wired opened Oct 3, 2026Contributor
serdect: check the decoded length on the hex path too
#2463yuxi-liu-wired opened Oct 3, 2026Contributor
phc: add_b64_bytes keeps the ParamsString invariants
#2462yuxi-liu-wired opened Oct 3, 2026Contributor
tls_codec: enforce the mls vector length limit in DeserializeBytes
#2461yuxi-liu-wired opened Oct 3, 2026Contributor
base32ct: reject non-zero trailing bits in the last symbol
#2460yuxi-liu-wired opened Oct 3, 2026Contributor
base64ct: decode_in_place rejects non-zero trailing bits like decode
#2459yuxi-liu-wired opened Oct 3, 2026Contributor
x509-cert: CertificateBuilder: reject duplicate extensions
#2458yuxi-liu-wired opened Oct 3, 2026Contributor
pkcs1: reject an empty otherPrimeInfos
#2457yuxi-liu-wired opened Oct 3, 2026Contributor
x509-cert: CrlBuilder: omit an empty revokedCertificates list
#2456yuxi-liu-wired opened Oct 3, 2026Contributor
x509-cert: RequestBuilder: omit an empty extensionRequest attribute
#2455yuxi-liu-wired opened Oct 3, 2026Contributor
x509-cert: CrlBuilder: authorityKeyIdentifier is the issuer's own key
#2454yuxi-liu-wired opened Oct 3, 2026Contributor
pkcs1: decode RsaPssParamsRef/RsaOaepParamsRef from non-'static input
#2453yuxi-liu-wired opened Oct 3, 2026Contributor
pkcs12: SafeBag encode writes bag_value as decoded
#2452yuxi-liu-wired opened Oct 3, 2026Contributor
2
der: order FlagSet by its BIT STRING encoding
#2451yuxi-liu-wired opened Oct 2, 2026Contributor
der: Option::der_cmp(None, None) is Equal
#2449yuxi-liu-wired opened Oct 2, 2026Contributor
der: order UTCTime in SET OF by its encoding
#2448yuxi-liu-wired opened Oct 2, 2026Contributor
2
der: order SET OF components by their encoded octets (X.690 11.6)
#2447yuxi-liu-wired opened Oct 2, 2026Contributor
2
x509-cert: accept v1 CRLs (TBSCertList.version is OPTIONAL)
#2445yuxi-liu-wired opened Oct 2, 2026Contributor
x509-cert: parse the empty string as the empty Name
#2444yuxi-liu-wired opened Oct 2, 2026Contributor

Navigation Menu

All pull requests

cmpv2: `PkiFailureInfoValues` are bit masks

pkcs12: PBKDF2-params prf is DEFAULT algid-hmacWithSHA1

cms: OneSymmetricKey sKeyAttrs is OPTIONAL

cms: CertificateChoices other [3] is IMPLICIT

crmf: tag non-CHOICE fields implicitly, as RFC 4211 defines

cms: tag TimeStampedData / ERS types implicitly, as RFC 5544 and RFC 4998 define

gss-api: tag RFC 2478 NegTokenInit fields explicitly

serdect: check the decoded length on the hex path too

phc: add_b64_bytes keeps the ParamsString invariants

tls_codec: enforce the mls vector length limit in DeserializeBytes

base32ct: reject non-zero trailing bits in the last symbol

base64ct: `decode_in_place` rejects non-zero trailing bits like `decode`

x509-cert: CertificateBuilder: reject duplicate extensions

pkcs1: reject an empty `otherPrimeInfos`

x509-cert: CrlBuilder: omit an empty revokedCertificates list

x509-cert: RequestBuilder: omit an empty extensionRequest attribute

x509-cert: CrlBuilder: authorityKeyIdentifier is the issuer's own key

pkcs1: decode `RsaPssParamsRef`/`RsaOaepParamsRef` from non-`'static` input

pkcs12: `SafeBag` encode writes `bag_value` as decoded

der: order `FlagSet` by its BIT STRING encoding

der: `Option::der_cmp(None, None)` is `Equal`

der: order `UTCTime` in `SET OF` by its encoding

der: order `SET OF` components by their encoded octets (X.690 11.6)

x509-cert: accept v1 CRLs (`TBSCertList.version` is OPTIONAL)

x509-cert: parse the empty string as the empty `Name`

Pull requests