RidwanandBrandon Thomas 586f2b2be3 M9: harden .p12 digital IDs (#1847) (#2201) ...

* M9: harden .p12 digital IDs (#1847)

New digital IDs are written with 600,000 PBKDF2-HMAC-SHA-256 rounds (OWASP)
for both encrypted parts and the MAC, instead of 2048. The MAC gets the same
count because checking it alone tells whether a guessed password is right.

Opening a .p12 now spends at most 10 million rounds of key derivation across
the whole file, charged before any hashing. The file chose its own iteration
counts unchecked (`u64 as u32`), so a crafted file could hang the password
check for about an hour, or wrap 2^32+1 to one round.

Creating an ID needs at least 8 characters (NIST SP 800-63B), from one
constant, pkcs12::MIN_PASSWORD_CHARS, shared by the app, sign_id_create and
its MCP schema. Opening an existing ID takes any password.

* Refresh catalog hashes after merging main

---------

Co-authored-by: Brandon Thomas <echelon@gmail.com>

2026-10-15 02:48:32 -04:00

..

data

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

algorithms.rs

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

ber.rs

M9: read BER signatures (DocuSign, Documenso); classify later changes narrowly (#144)

2026-10-09 18:43:21 -04:00

chain.rs

fix(sign): an unreadable extendedKeyUsage allows no purpose (#1807) (#1866)

2026-10-15 02:27:33 -04:00

crypto.rs

M9: harden .p12 digital IDs (#1847) (#2201)

2026-10-15 02:48:32 -04:00

pdf.rs

fix(sign): a signed page's resources are page content whatever keys a later revision writes (#1787) (#2115)

2026-10-15 02:45:35 -04:00

store_keys.rs

Sign: decide Windows store keys in code every platform builds (#690)

2026-10-10 06:14:36 -04:00