All pull requests

Pull requests

• Fix CVE-2026-85393: reject non-canonical DigestInfo in RSA PKCS#1 v1.5 verification

  #1159·matthewscottconroy opened Oct 9, 2026·

  ·
  1

  3

• CVE-2026-8539 fixed the root cause of given CVE

  #1158·vasuUN opened Oct 7, 2026·

  ·
  6

• Reject nonempty DigestAlgorithm NULL parameters

  #1157·itsalexfer opened Oct 4, 2026·

  ·

• Fix RSA PKCS#1 v1.5 forgery via nested DigestAlgorithm garbage

  #1152·Krysthyan opened Sep 9, 2026·4 tasks done·

  ·
  1

  2

• Fix RC2 effective-key-length mask per RFC 2268

  #1150·ArockiaRajamanickam opened Aug 1, 2026·

  ·
  1

• Fix encoding/decoding of multi-byte first OID subidentifier

  #1148·spokodev opened Jun 23, 2026·

  ·

• fix: enforce pathLenConstraint regardless of keyUsage extension

  #1142·eddieran opened Apr 12, 2026·

  ·

• Add PayPal as a funding option.

  #1140·BigBlueHat opened Mar 25, 2026Contributor·

  ·
  1

• Fix Typo (tmp.length() -> tmp.length)

  #1111·bigdale123 opened Apr 12, 2025·

  ·
  5

• fix: avoid using native Node.js modules in the Electron renderer process.

  #1110·Thulof opened Mar 1, 2025·

  ·
  2

• feat: Enhance URL validation in console logger

  #1103·LaelLuo opened Dec 7, 2024·

  ·

• Add support for CRLs

  #1090·El-Virus opened Jul 30, 2024·

  ·

• Fix password mechanism

  #1085·Sebastian-Dieguez opened Jun 5, 2024·

  ·
  1

• Enhancement and .NET interoperability

  #1084·Sebastian-Dieguez opened Jun 4, 2024·

  ·

• In CTR mode, support to encrypt/decrypt from the middle of a message

  #1077·zboris12 opened Apr 29, 2024·

  ·

• Add a fallback global scope for runtime likes wechat mini program

  #1066·imyelo opened Dec 21, 2023·

  ·
  1

• pkcs7 PublicKey + RSASSA-PSS support + Secret Key Encryption for recipient

  #1063·frelibert opened Dec 14, 2023·

  ·
  3

• feat(pkcs12): support different MAC Algorithms for PKCS12 generation

  #1062·leninmehedy opened Dec 13, 2023·

  ·
  1

• [remote-signing]: allow p7 DigestInfo extraction and signature insertion into p7 structure

  #1038·rohhamh opened Jun 16, 2023·

  ·

• use up-to-date SPDX license expression

  #1020·mojoaxel opened Feb 8, 2023·

  ·

• Fix _crypto.randomBytes error

  #1007·mahdipakravan-dev opened Oct 19, 2022·

  ·

• Updated ED25519 docs

  #995·revoltez opened Jul 27, 2022·

  ·

• Allow custom authenticatedAttributes

  #991·dettoni opened Jul 13, 2022·

  ·

• bug fix privateKeyToPutty generation function

  #987·romeech91 opened Jun 15, 2022·

  ·
  1

• throw exception instead of returning false, if gcm tag validation evaluates to invalid.

  #979·johanna-herrmann opened Apr 23, 2022·

  ·