picky-asn1-x509

<!-- 7 -->Build

• Update crypto dependencies (#448) (0bf42c1c4b)

<!-- 7 -->Build

• Remove num-bigint-dig (#425) (9081890c3c)

<!-- 1 -->Features

• Support parsing certs with MLDSA public keys (#411) (abc63dde88)

<!-- 1 -->Features

• Improve support for SHA3 digests within EC and RSA certificates (#397) (c898c1a65a)

Changed

• Bump minimal rustc version to 1.85.

<!-- 1 -->Features

• Add smart card logon oid (#394) (df9a35283f)

<!-- 0 -->Security

• Properly zeroize RsaPrivateKey (#386) (ace208d604)

  The Drop implementation of the RsaPrivateKey struct was only partially zeroizing the secrets.

<!-- 4 -->Bug Fixes

• Invalid parameters for ecdsa with sha512 serialization (#377) (ee3ed749e6)

<!-- 4 -->Bug Fixes

• Symlinks to license files in packages (#339) (1834c04f39)

  Use symlinks instead of copying files to avoid a “dirty” state during cargo publish and preserve VCS info. With #337 merged, CI handles publishing consistently, so developer environments no longer matter.

<!-- 1 -->Features

• AesAuthEncParams::new method (#336) (c33cf22bac)

• Add enveloped-data oid (#335) (c077c72ee9)

• Add ContentInfo in pkcs7 module (#334) (eaa43c36f6)

Changed

• picky-test-data is a new dev-dependency.
• Update dependencies.

Added

• EnvelopedData and related structures
• API to query and set MAC algorithm for PFX
• Protection descriptors OIDs

Fixed

• Better algorithm identifier parsing

Changed

• Bump minimal rustc version to 1.61
• Update dependencies

Added

• PKCS12 ASN.1 structures
• USER_PRINCIPAL_NAME oid

Fixed

• License files are now correctly included in the published package

Changed

• Update dependencies

Added

• PKCS12 module

Changed

• Renamed oids::pkcs7 to correct oids::content_info_type_data

Fixed

• Fixed AlgorithmIdentifier parsing: made ECParameters non-optional for EC keys
• Fixed ECParameters - public_key now allowed to be optional
• Fixed broken wasm compilation

Added

• oid is now added as re-export
• New API methods:
  • EcParameters::curve_oid
  • PrivateKeyInfo::new_ec_encryption
  • signature::EcdsaSignatureValue
  • AlgorithmIdentifier::is_one_of
  • AlgorithmIdentifier::new_x25519
  • AlgorithmIdentifier::new_ed448
  • AlgorithmIdentifier::new_x448
  • PrivateKeyInfo::new_ed_encryption
  • SubjectPublicKeyInfo::new_ed_key
• New constants:
  • private_key_info::PRIVATE_KEY_INFO_VERSION_1
  • private_key_info::PRIVATE_KEY_INFO_VERSION_2
• Support of Ed25519/X25519/Ed448/X448 key structures

Changed

• (Breaking) AlgorithmIdentifier::new_elliptic_curve now accepts EcParameters instead of impl Into<Option<EcParameters>>
• (Breaking) AlgorithmIdentifierParameters::Ec now have EcParameters instead of Option<EcParameters>
• (Breaking) SubjectPublicKeyInfo::new_ec_key now accepts curve's ObjectIdentifier and point as BitString
• PrivateKeyInfo structure now also could represent newer OneAsymmetricKey structure (structures are backward-compatible). This allows to represent Ed keys with public key field set

Added

• More OIDs such as PKINIT_AUTH_DATA and PKINIT_DH_KEY_DATA
• Support for BMPString

Added

• Implement Zeroize on ECPrivateKey and RsaPrivateKey (behind feature zeroize)

Changed

• Bump minimal rustc version to 1.60

Added

• OIDs used by NLA protocols

Added

• Support for Authenticode timestamp deserialization/serialization
• CTL implementation behind ctl feature
• New SpcSipInfo struct
• Add serialization/deserialization of Authenticode TimestampRequest
• Add timestamp request OID
• Add a few methods for creating an Attribute without usage low-level API:
  • Attribute::new_content_type_pkcs7
  • Attribute::new_signing_time
  • Attribute::new_message_digest
• Add EncapsulatedContentInfo::new_pkcs7_data method

Changed

• (Breaking) ShaVariant enum is extended for MD5 and SH1 algorithms
• (Breaking) Add SpcStatementType variant in AttributeValues enum
• (Breaking) Add SigningTime variant in AttributeValues enum
• SpcAttributeAndOptionalValue now supports both SpcPeImageData and SpcSipInfo values
• Bump minimal rustc version to 1.56

Fixed

• SignedData:
  • (Breaking) RevocationInfoChoice field is now optional as specified by the RFC
  • (Breaking) CertificateSet is now a Vec<CertificateChoices> which can accept both a normal Certificate and an other kind of certificate as specified by the RFC

Added

• More ECC OIDs (#87)

Added

• Support for V1 and V2 X509 certificates (#83)
• Support for CrlNumber extension (#83)
• PKCS7 implementation behind pkcs7 feature (#83)

Changed

• More supported attribute values: ContentType, MessageDigest and SpcSpOpusInfo (#83)
• Fix clippy upper case acronyms warning in a few places (#85)

Removed

• Remove ImplicitCurve from EcParameters enum (#85)

Added

• Support for attributes in CertificationRequestInfo (#78)

Added

• OIDs from RFC8410 (#72)
• Support for Ed25519 AlgorithmIdentifier and PublicKey (#72)

Changed

• AlgorithmIdentifier parser has been made more lenient. For instance, rsa-export-0.1.1 crate does not serialize the "NULL" parameter with rsa encryption OID. Such input is not rejected anymore.

Added

• Documentation on oids module.

Added

• legacy feature to support previously valid RSAPrivateKey with 6 components instead of 9 as specified by the RFC. Missing components are instead computed on the fly as required.

Changed

• Update dependencies

Added

• DigestInfo from RFC8017

Changed

• RSAPrivateKey fields are now pub
• PrivateKeyInfo::new_rsa_encryption takes 6 arguments instead of 8

Deprecated

• RSAPrivateKey getters are deprecated in favor of direct access of public fields

Added

• NIST signature related OIDs
• AlgorithmIdentifier::new_sha3_384_with_rsa_encryption constructor
• AlgorithmIdentifier::new_sha3_512_with_rsa_encryption constructor
• Support for email attribute in certificate subject

Changed

• Rename "organisation" to "organization"
• Change attribute structure in directory names to follow common practices

Fixed

• RSAPrivateKey is now RFC8017 compliant