Security context

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

asn1crypto/x509.py: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Returning absolute confirmation ('yes') on self-signed certificates purely based on key identifier matching allows callers to bypass cryptographic signature verification, leading to trust validation failures.

Signature Verification Bypass: Lax tag encoding validation in the core parser permits non-canonical ASN.1 structures, which can be leveraged to evade signature verification and parsing logic.

Cryptographic Issues: Using 'assert' statements for mathematical validation in elliptic curve point initialization fails to enforce constraints when the code runs in optimized Python mode (-O), allowing malformed inputs to bypass safety checks.