Fix/rsa oaep mgf1 - #140

Open

elbuo8 wants to merge 14 commits into

auth0:masterfrom

elbuo8:fix/rsa-oaep-mgf1

Commits on Jul 31, 2026

fix: resolve XML-Enc elements by DOM traversal instead of XPath

elbuo8
and
claude
committed
feat: add OAEP encode/decode with independent MGF1 digest

elbuo8
and
claude
committed
fix(oaep): hoist key parsing, pin rejection guards, use branch-free isZero/isOne

elbuo8
and
claude
committed
fix!: pin MGF1 to SHA-1 for rsa-oaep-mgf1p on decrypt
elbuo8
committed
fix!: emit MGF1-SHA1 ciphertext for rsa-oaep-mgf1p
elbuo8
committed
test: fix flaky MGF assertion and strengthen key length check

elbuo8
and
claude
committed
feat: support xmlenc11#rsa-oaep with an explicit MGF element

elbuo8
and
claude
committed
feat: honour OAEPparams as the RSA-OAEP label

elbuo8
and
claude
committed
docs: document MGF1 semantics and the xmlenc11#rsa-oaep identifier

elbuo8
and
claude
committed
docs: drop invented version number from the MGF1 breaking-change note
elbuo8
committed
fix: correct OAEPparams namespace and derive MGF map single-source

elbuo8
and
claude
committed
test: pin OAEP seed randomness property

elbuo8
and
claude
committed
refactor: separate the legacy MGF alias from the canonical list

elbuo8
and
claude
committed
fix: read OAEPparams and MGF through the DOM helpers

elbuo8
and
claude
committed