Quantum: OpenSSL signatures

[GrosQuildu]

• OpenSSL signatures (EVP): algorithm, algorithmConsumers, operations, tests
• OpenSSL keygen (EVP)

[Copilot]

Pull Request Overview

This PR introduces support for OpenSSL signatures and key generation within the Quantum library while updating the associated data flows. Key changes include test updates to reflect new nonce and key source expectations, new and updated QL classes for modeling signature operations (EVPSignatureOperation.qll), and modifications to existing base classes and data flow modules (e.g. OpenSSLOperationBase.qll, CtxFlow.qll) to support these changes.

Reviewed Changes

Copilot reviewed 48 out of 48 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
cpp/ql/test/experimental/library-tests/quantum/openssl/cipher_nonce_sources.expected	Updated expected test output for nonce sources.
cpp/ql/test/experimental/library-tests/quantum/openssl/cipher_key_sources.ql	Added query to support new cipher key sources tracking.
cpp/ql/test/experimental/library-tests/quantum/openssl/cipher_key_sources.expected	Updated expected test output for key sources.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/OpenSSLOperations.qll	Added import for EVPSignatureOperation for signature support.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/OpenSSLOperationBase.qll	Updated base operations including algorithm value consumer flow handling.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPSignatureOperation.qll	New module modeling EVP signature operations, including initialization, update, and final call classes.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPKeyGenOperation.qll	New module for EVP key generation operations supporting both keygen and parameter generation.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPHashOperation.qll	Updates to hash operations with changes to input/output and data flow tracking.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPHashInitializer.qll	Changed inheritance to extend EVPInitialize.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPCipherOperation.qll	Updated cipher operation modeling with revised data flow implementations.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/EVPCipherInitializer.qll	Modified to use EVPInitialize and updated key operation subtype handling.
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/ECKeyGenOperation.qll	Simplified EC key generation operation implementation.
cpp/ql/lib/experimental/quantum/OpenSSL/CtxFlow.qll	Revised CtxPointerExpr and updated context flow predicates.
cpp/ql/lib/experimental/quantum/OpenSSL/AlgorithmValueConsumers/*	New files for modeling signature and PKey algorithm consumers integrated into the value consumer framework.
cpp/ql/lib/experimental/quantum/OpenSSL/AlgorithmInstances/*	New and modified files to support signature algorithm instances and update known algorithm constants.
CODEOWNERS	Adjusted pattern matching for experimental quantum code ownership.

[github-advanced-security]

CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

[nicolaswill]

At least one file has not been auto-formatted:

Run find shared */ql -type f \( -name "*.qll" -o -name "*.ql" \) -print0 | xargs -0 -n 3000 -P 10 codeql query format -q --check-only
cpp/ql/lib/experimental/quantum/OpenSSL/AlgorithmValueConsumers/PKeyAlgorithmValueConsumer.qll would change by autoformatting.
Error: Process completed with exit code 123.

[GrosQuildu]

Closing as the work will be moved to a new PR.