Brandon ThomasandClaude Opus 5.5 456a42a896 Never crash: sign has no expect/unreachable ...

PKCS #12 HMAC errors now propagate as `SignError`. Key-bag lookup uses `find_map` and chain
building uses `let … else`. `der::oid` (only ever given this crate's OID literals) keeps the
standard's narrow, documented `expect` exception. The crate now denies the panic lints.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-04 13:12:20 -04:00

..

cms.rs

M9.1–M9.3: new sign crate: DER, X.509, CMS SignedData, PKCS #12 (PBES2 and legacy, MAC) on RustCrypto with aws-lc-rs for RSA private keys; PAdES B-B signing (new or existing field, visible or invisible, DocMDP certification) with an incremental placeholder save; validation (digest, signature, chain against a trust store, changes after signing classified under DocMDP); checked against pdfsig and OpenSSL

2026-10-02 02:43:46 -04:00

der.rs

Never crash: sign has no expect/unreachable

2026-10-04 13:12:20 -04:00

keychain.rs

M9: Sign with macOS Keychain identities (keys stay in the Keychain): listed in Sign with a Digital ID; sign_keychain_ids, sign_document id keychain:…

2026-10-02 07:55:07 -04:00

keys.rs

M9: Sign with macOS Keychain identities (keys stay in the Keychain): listed in Sign with a Digital ID; sign_keychain_ids, sign_document id keychain:…

2026-10-02 07:55:07 -04:00

lib.rs

Never crash: sign has no expect/unreachable

2026-10-04 13:12:20 -04:00

pdf.rs

M9 perf: signature revalidation after edits reuses the signed ranges' digests and the parsed signed revision (DigestCache per document) and no longer scans the file for revision markers: a comment edit on a 120 MB signed file takes 6 ms instead of 84 ms; cos exposes xref entries so unchanged objects are skipped when diffing revisions

2026-10-02 03:08:51 -04:00

pkcs12.rs

Never crash: sign has no expect/unreachable

2026-10-04 13:12:20 -04:00

x509.rs

Never crash: sign has no expect/unreachable

2026-10-04 13:12:20 -04:00