aiongg 77ee1c8a26 fix(sign): read DSS revocation evidence one stream at a time within caps ...

Revocation checking decoded every /CRLs and /OCSPs entry under the
general 1 GiB stream limit and kept them all before parsing any, so one
compressed stream referenced many times multiplied decoding and memory.
Evidence now decodes lazily, each stream once and within the 2 MiB
evidence cap, with at most 1024 entries and 64 MiB per array.

2026-10-22 17:08:54 +00:00

..

cms.rs

Merge PR #2559: Signatures: signed attributes must carry the message digest and the data content type

2026-10-22 01:46:21 +00:00

der.rs

Use chrono instead of hand-rolled UTC conversion (#3824)

2026-10-21 19:36:46 -04:00

dss.rs

Signatures: RFC 3161 timestamps, document timestamps, DSS/VRI and revocation verification (non-network half) (#69)

2026-10-07 23:02:40 -04:00

ec512.rs

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

graphic.rs

fix(sign): fill typed signature outlines with non-zero winding (#1786)

2026-10-16 07:24:33 +08:00

keychain.rs

fix(sign): embed the issuers of macOS Keychain identities

2026-10-20 14:27:52 -03:00

keys.rs

fix(sign): the key description counts the modulus bits like the warning

2026-10-19 18:27:34 +03:00

lib.rs

i18n: let the layers below hand their sentences over, so they can be translated (#478)

2026-10-11 15:45:51 -04:00

pdf_discovery_tests.rs

fix(sign): read DSS revocation evidence one stream at a time within caps

2026-10-22 17:08:54 +00:00

pdf.rs

fix(sign): read DSS revocation evidence one stream at a time within caps

2026-10-22 17:08:54 +00:00

pkcs12.rs

M9: harden .p12 digital IDs (#1847) (#2201)

2026-10-15 02:48:32 -04:00

revocation.rs

fix(sign): read DSS revocation evidence one stream at a time within caps

2026-10-22 17:08:54 +00:00

rsa_pad.rs

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

timestamp.rs

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

windows.rs

Merge PR #2989: fix(sign): explain 0x8009001D and 0xC0000225 when a store key's provider fails

2026-10-22 01:44:55 +00:00

x509.rs

fix(sign): require the time-stamping purpose for trusted timestamps

2026-10-22 12:13:16 -04:00