Change SID/MID feedback signature - #87

Open

lauris71 wants to merge 98 commits into

open-eid:masterfrom

Commits on Jan 9, 2026

Added CDocV1 tests
Lauris Kaplinski
committed
1b76e52
Added CDoc1 tests and cleaned up testing
Lauris Kaplinski
committed
7a2b181

Commits on Jan 13, 2026

More CDocCipher cleanups
Lauris Kaplinski
committed
2629756
Fix windows build
Lauris Kaplinski
committed
4febb5c
Fix initializer order for gcc
Lauris Kaplinski
committed
dd2cf68
Use again absolute paths for tests
Lauris Kaplinski
committed
5e4e80f
Create test tmp path if not exist
Lauris Kaplinski
committed
bb66be5

Commits on Jan 14, 2026

Change SID/MID callback signature to handle QR codes
Lauris Kaplinski
committed
a4efe25
Apply suggestions from code review

lauris71
and
metsma
authored
0cab1cb
Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
0da1fd8
Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
75d1101
Merge branch 'open-eid:master' into master
lauris71
authored
5b32d9f
Merge branch 'master' into sid2
Lauris Kaplinski
committed
87e5493

Commits on May 20, 2026

Some fixes from ai security audit
Lauris Kaplinski
committed
53a6898

Commits on May 22, 2026

Fixed cdoc-tool index usage
Lauris Kaplinski
committed
47715fe

Commits on May 25, 2026

Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
fef2389
Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
8848542

Commits on May 26, 2026

Some more AI issue fixes
Lauris Kaplinski
committed
bf5ca62

Commits on May 27, 2026

Hardcode SSL timeout
Lauris Kaplinski
committed
0a6b12b
Fixed xstream uint overflow and tool logging
Lauris Kaplinski
committed
a4dafb9
Some more fixes
Lauris Kaplinski
committed
8c9b789
Secure tool key handling, use explicid compile time definitions for key dump and TLS diabling
Lauris Kaplinski
committed
e9a8a6e
Fixed potential tar size overflow and secured proxy password
Lauris Kaplinski
committed
fa288ee
Windows build fix
Lauris Kaplinski
committed
b89e4f1
Revert proxy password for now
Lauris Kaplinski
committed
d0e0c90

Commits on May 29, 2026

Make proxy password string_view
Lauris Kaplinski
committed
87d1547

Commits on Jun 1, 2026

Disable potential Bleichenbacher attack for CDoc1 RSA encryption
Lauris Kaplinski
committed
3631991
Moved fix to main decryptRSA method
Lauris Kaplinski
committed
7e6cdaa
Added ct.h
Lauris Kaplinski
committed
f01510a
Bleichenbacher fix for NCrypt backend
lauris71
committed
0aec4a1
Some cleanups
Lauris Kaplinski
committed
6f37761

Commits on Jun 5, 2026

All C,H & M fixes from Caludo Opus review
Lauris Kaplinski
committed
cc19133
Merge branch 'open-eid:master' into master
lauris71
authored
6bd12a8
Update cdoc-tool
Lauris Kaplinski
committed
8102224

Commits on Jun 11, 2026

Merge branch 'open-eid:master' into master
lauris71
authored
c3d8dd2
Merge branch 'master' into ai-security
Lauris Kaplinski
committed
bb9945c
Make default KDF iter 600000
Lauris Kaplinski
committed
08ca9e5

Commits on Jun 16, 2026

Added std_string_view.i
Lauris Kaplinski
committed
004ce57
Fixed label parsing on Ubuntu 22
Lauris Kaplinski
committed
212825a

Commits on Jun 17, 2026

Include <string.h>
Lauris Kaplinski
committed
6db3372
Use explicit_bzero on glibc
Lauris Kaplinski
committed
8a2f494
Use SecureZeroMemory on windows
Lauris Kaplinski
committed
573f147
Use OPENSSL_cleanse for secure cleanup
Lauris Kaplinski
committed
2d552cb
Fixed inverted constant-time comparison
Lauris Kaplinski
committed
f63ed77
Merge branch 'open-eid:master' into master
lauris71
authored
a6fc79a
Merge commit 'a6fc79ad2e3c4d9d34157742f84db1c0c25faca3' into ai-security
Lauris Kaplinski
committed
88f1fa7

Commits on Jul 2, 2026

Merge branch 'ai-security' into sid2
Lauris Kaplinski
committed
578ff3a
Update cdoc/CDocCipher.cpp
metsma
authored
c0626a0
Fix build for SIDMID
Lauris Kaplinski
committed
eb091c3
Fixed PKCS11 and NCrypt RSA handling and check all random() calls for success
Lauris Kaplinski
committed
0e544fc

Commits on Jul 3, 2026

Fix share encryption
Lauris Kaplinski
committed
3641679
Fixed PKCS11 public key loading
Lauris Kaplinski
committed
3e62abe
Merge branch 'open-eid:master' into master
lauris71
authored
68cc522
Merge branch 'master' into sid2
Lauris Kaplinski
committed
32995f7

Commits on Jul 15, 2026

fixes
Lauris Kaplinski
committed
ed72221
Fixed label UTF-8 escaping if locale is not C
Lauris Kaplinski
committed
5769447
Merge branch 'open-eid:master' into master
lauris71
authored
a7b7c6b
Fixed label generation for non-C locales
Lauris Kaplinski
committed
1225355
Merge branch 'master' of github.com:lauris71/libcdoc
Lauris Kaplinski
committed
4ba85f1

Commits on Jul 24, 2026

Merge branch 'open-eid:master' into master
lauris71
authored
e5ac2a3
Working authentication
Lauris Kaplinski
committed
1df498c
Merge branch 'master' into ai-security
Lauris Kaplinski
committed
463bfd5
Added SecureTarget class
Lauris Kaplinski
committed
dc23ffa

Commits on Jul 27, 2026

Fixed N1 (out-of-bounds read) from 2026-07 report
Lauris Kaplinski
committed
139d1a7
Added Utils.cpp to test build
Lauris Kaplinski
committed
e37902c
Delete reader and writer in TestPasswordWithlabel
Lauris Kaplinski
committed
e7ad099
Clean up z_stream on zlib errors
Lauris Kaplinski
committed
5743645
Fixed N3 (base64 decode throws on errors) from 202607 report
Lauris Kaplinski
committed
6ae5ab9

Commits on Aug 4, 2026

Initial working SID decryption
Lauris Kaplinski
committed
90c72e6
Preliminary configuration settings for MID
Lauris Kaplinski
committed
31fb917

Commits on Aug 5, 2026

Check that we have session disclosures for all share servers before contacting them
Lauris Kaplinski
committed
eaf6bff
Added CDoc2Reader.cpp changes
Lauris Kaplinski
committed
a63652e
Merge branch 'ai-security' into sid2
Lauris Kaplinski
committed
976cab5
More fixes to SID
Lauris Kaplinski
committed
9b65423

Commits on Aug 6, 2026

Validate auth and rp server signatures
Lauris Kaplinski
committed
adc94f4

Commits on Aug 7, 2026

Preliminary working MobileId authentication
Lauris Kaplinski
committed
df0a4ed
Added MID signature and certificate validation
Lauris Kaplinski
committed
b638e6d

Commits on Aug 12, 2026

Fixed keyshare KEK creatin, urlencode untrusted path components, log malformed session token
Lauris Kaplinski
committed
36545e6
Verify shares recipient and vc code
Lauris Kaplinski
committed
8492680

Commits on Aug 14, 2026

Made SessionData public
Lauris Kaplinski
committed
9b01b40
Added tests for MID/SID (not automatic)
Lauris Kaplinski
committed
08b5d44

Commits on Aug 17, 2026

Reworking CDocTool.java
Lauris Kaplinski
committed
2481367
Minor fixes: removed AES-CBC, N4, N5
Lauris Kaplinski
committed
e2d7828
fixed N7 (zstream max size), N8 (PBKDF limits), N9 (logging), N10 (throttle per key)
Lauris Kaplinski
committed
b47770c
Added comment about N12 (OpenSSL fast-path timing), fixed N13 (decodeBase64 finalising), N14 (OID buffer overflow), N15 (getInt throwing)
Lauris Kaplinski
committed
662da29
Fixed N17 (time parsing errors) and N18 (clean FMK in CDocCipher)
Lauris Kaplinski
committed
311be5b

Commits on Aug 18, 2026

Fixed N20 (handle exactly 100 byte tar filenames), N21 (treat PKCS11 cacncel as error), N22 (securely clear shared secret), N23 (handle io failure properly),N24 (handle utf8 properly in filename sa…
Lauris Kaplinski
committed
fb37985
Minor logging cleanups
Lauris Kaplinski
committed
0892d09
fixed libcoc::LOG...
Lauris Kaplinski
committed
9743447
Remove apostrofes from numberl literals
Lauris Kaplinski
committed
11bfdad
Use swig workaround for new configuration keys
Lauris Kaplinski
committed
dce0136
Merge branch 'ai-security' into sid2
Lauris Kaplinski
committed
75bb399

Commits on Aug 19, 2026

Added get() and post() virtual methods to NetworkBackend, plus SID/MID polling methods.
Lauris Kaplinski
committed
b4d4bd1

Commits on Aug 24, 2026

Cleaned up (both C and Java) api
Lauris Kaplinski
committed
f7d15a9
Made SID/MID display text configurable
Lauris Kaplinski
committed
b30321a

Commits on Aug 25, 2026

use core names for old openSSL
Lauris Kaplinski
committed
6193802
Small fixes
Lauris Kaplinski
committed
9cb19fe

Commits on Aug 28, 2026

unittests now has SID/MID test with RIA dev servers (not run by default)
Lauris Kaplinski
committed
fd03e1e