fix!: mask generation should use sha1 for rsa-oaep-mgf1p - #140

Open

elbuo8 wants to merge 14 commits into

auth0:masterfrom

elbuo8:fix/rsa-oaep-mgf1

Commits on Aug 3, 2026

feat: add OAEP encode/decode with independent MGF1 digest

elbuo8
and
claude
committed
1b9c3cd
fix(oaep): hoist key parsing, pin rejection guards, use branch-free isZero/isOne

elbuo8
and
claude
committed
aaa11cf
fix: resolve DigestMethod relative to the located EncryptionMethod

elbuo8
and
claude
committed
d638599
fix!: pin MGF1 to SHA-1 for rsa-oaep-mgf1p on decrypt
elbuo8
committed
3488b65
fix!: emit MGF1-SHA1 ciphertext for rsa-oaep-mgf1p
elbuo8
committed
d2548b1
test: fix flaky MGF assertion and strengthen key length check

elbuo8
and
claude
committed
dbddd54
feat: support xmlenc11#rsa-oaep with an explicit MGF element

elbuo8
and
claude
committed
3bcca9b
feat: honour OAEPparams as the RSA-OAEP label

elbuo8
and
claude
committed
de54d5e
docs: document MGF1 semantics and the xmlenc11#rsa-oaep identifier

elbuo8
and
claude
committed
dada365
docs: drop invented version number from the MGF1 breaking-change note
elbuo8
committed
8c31174
fix: correct OAEPparams namespace and derive MGF map single-source

elbuo8
and
claude
committed
ca4f33e
test: pin OAEP seed randomness property

elbuo8
and
claude
committed
eff713e
refactor: separate the legacy MGF alias from the canonical list

elbuo8
and
claude
committed
7e94135

Commits on Aug 4, 2026

chore: comment
elbuo8
committed
d4ed029