netxduo.git/nx_secure/src, branch dev

Added support for parsing ASN.1 GeneralizedTime in X509 Certificates (#267)

2026-05-28T13:41:33Z

* add support for parsing ASN.1 GeneralizedTime * fix validity format field error * changed CertMsg notBefore format to be in GeneralizedTime format * changed notBefore time to be in GeneralizedTime format * changed notAfter time to be in GeneralizedTime format * expand tests for invalid date format * update function comments * update function comments --------- Co-authored-by: Frédéric Desbiens

Fixed issues in the PSK implementation (#386)

2026-05-28T13:29:10Z

* Fixed server PSK identity selection for ECDHE-PSK * Fixed selected client PSK identity preservation Implemented logic to cache the PSK store entry selected by the server identity hint so ClientKeyExchange emits the matching identity when clients use the PSK store path. Cast the ECC supported-group test value to USHORT so the PSK identity regression builds cleanly with -Werror on Linux. Assisted-By: Codex (OpenAI GPT-5.5)

Added RSA-PSS signature verification support (TLS 1.3 with RSA cert) (#377)

2026-05-21T19:23:32Z

* Add RSA-PSS * Fix SHA-384/512 transcript hash truncation and add MGF1 bounds check Address review feedback on RSA-PSS PR: - Resize handshake_hash buffer from 130 to 162 bytes (64+34+64) in both nx_secure_tls_process_certificate_verify.c and nx_secure_tls_send_certificate_verify.c to fit SHA-512 transcript. - Replace hardcoded 32-byte transcript hash copy with dynamic length derived from hash_method->nx_crypto_ICV_size_in_bits. - Add bounds check in _nx_crypto_rsa_pss_mgf1 to reject hash_method whose output exceeds the local hash_buf size. * Fix RSA-PSS verify in TLS 1.2 ServerKeyExchange Extend RSA-PSS support to TLS 1.2 ServerKeyExchange signature verify: - nx_secure_process_server_key_exchange.c: detect RSA-PSS wire codes (0x0804/0805/0806) and dispatch to _nx_crypto_rsa_pss_verify after RSA decrypt; PKCS#1 v1.5 path kept for non-PSS signatures. - nx_secure_tls_process_clienthello_extensions.c: map RSA-PSS wire codes to the existing RSA SHA-256/384/512 internal IDs so the certificate cipher table lookup finds the right hash method.

Updated copyright headers and version strings. Removed version history

2026-03-06T23:14:18Z

Fixed ServerKeyExchange processing for PSK and non-PSK ciphersuites in nx_secure

2026-03-06T22:15:20Z

Fixed build issue affecting nx_secure

2026-03-06T20:01:18Z

Fixed ECDHE_PSK cipher suites implementation. (#342)

2025-10-01T08:46:36Z

* Restored ECC_CIPHERSUITE ifdef code. * Added ifdefs to exclude PSK code when build options require it.

Merge commit from fork

2025-09-29T07:38:27Z

Fixed issue in _nx_secure_tls_process_clienthello()

Merge commit from fork

2025-09-29T07:34:10Z

Fix length checking in supported version extension, add test

Merge commit from fork

2025-09-29T07:29:34Z

Fix PSK extension length checking, add tests for such