Security context

Highlights

Cryptographic Issues: 1 prior fix. Scrutinize any change in this area.

src/certificate.rs: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Signature Validation Bypass: Attackers can bypass critical constraints (such as path length or key usage restrictions) by supplying certificates with duplicate extensions. If the parser retrieves a benign extension while validation logic evaluates a malicious duplicate, security policies are rendered ineffective.

Cryptographic Issues: Extracting the public key algorithm from the subject's certificate instead of the issuer's Subject Public Key Info (SPKI) during ECDSA signature verification can lead to verification failures or incorrect algorithm selection.

Denial of Service: Parsing empty bitstrings within certificate extensions triggers panic errors due to unexpected empty slice reads in the bitslice library. This allows unauthenticated remote attackers to crash applications parsing untrusted certificates.