Ai security fixes#130

Merged

lauris71 merged 36 commits into

open-eid:masterfrom

lauris71:ai-security

Jul 3, 2026

Commits on May 20, 2026

Some fixes from ai security audit
Lauris Kaplinski
committed

Commits on May 22, 2026

Fixed cdoc-tool index usage
Lauris Kaplinski
committed

Commits on May 25, 2026

Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored
Update cdoc/cdoc-tool.cpp

lauris71
and
metsma
authored

Commits on May 26, 2026

Some more AI issue fixes
Lauris Kaplinski
committed

Commits on May 27, 2026

Hardcode SSL timeout
Lauris Kaplinski
committed
Fixed xstream uint overflow and tool logging
Lauris Kaplinski
committed
Some more fixes
Lauris Kaplinski
committed
Secure tool key handling, use explicid compile time definitions for key dump and TLS diabling
Lauris Kaplinski
committed
Fixed potential tar size overflow and secured proxy password
Lauris Kaplinski
committed
Windows build fix
Lauris Kaplinski
committed
Revert proxy password for now
Lauris Kaplinski
committed

Commits on May 29, 2026

Make proxy password string_view
Lauris Kaplinski
committed

Commits on Jun 1, 2026

Disable potential Bleichenbacher attack for CDoc1 RSA encryption
Lauris Kaplinski
committed
Moved fix to main decryptRSA method
Lauris Kaplinski
committed
Added ct.h
Lauris Kaplinski
committed
Bleichenbacher fix for NCrypt backend
lauris71
committed
Some cleanups
Lauris Kaplinski
committed

Commits on Jun 5, 2026

All C,H & M fixes from Caludo Opus review
Lauris Kaplinski
committed
Merge branch 'open-eid:master' into master
lauris71
authored
Update cdoc-tool
Lauris Kaplinski
committed

Commits on Jun 11, 2026

Merge branch 'open-eid:master' into master
lauris71
authored
Merge branch 'master' into ai-security
Lauris Kaplinski
committed
Make default KDF iter 600000
Lauris Kaplinski
committed

Commits on Jun 16, 2026

Added std_string_view.i
Lauris Kaplinski
committed
Fixed label parsing on Ubuntu 22
Lauris Kaplinski
committed

Commits on Jun 17, 2026

Include <string.h>
Lauris Kaplinski
committed
Use explicit_bzero on glibc
Lauris Kaplinski
committed
Use SecureZeroMemory on windows
Lauris Kaplinski
committed
Use OPENSSL_cleanse for secure cleanup
Lauris Kaplinski
committed
Fixed inverted constant-time comparison
Lauris Kaplinski
committed
Merge branch 'open-eid:master' into master
lauris71
authored
Merge commit 'a6fc79ad2e3c4d9d34157742f84db1c0c25faca3' into ai-security
Lauris Kaplinski
committed

Commits on Jul 2, 2026

Update cdoc/CDocCipher.cpp
metsma
authored
Fixed PKCS11 and NCrypt RSA handling and check all random() calls for success
Lauris Kaplinski
committed

Commits on Jul 3, 2026

Fixed PKCS11 public key loading
Lauris Kaplinski
committed