Security context

Highlights

Auth Bypass: 16 prior fixes. Scrutinize any change in this area.

src/librepgp/stream-parse.cpp: most-fixed (6 issues). Treat as high-risk during review.

51 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Multiple fixes address signature validation bypasses, including hash size checks, key capability checks, and signature type validation. These are critical to prevent forged or unauthorized signatures from being accepted.

Cryptographic Implementation: ECDH key validation was previously a no-op, allowing invalid keys. Bounds checks and proper key parsing were added to prevent heap overflows and validation bypasses.

Buffer Overflow: Out-of-bounds reads when parsing secret key MPIs were fixed by adding input length validation. This is critical to prevent memory corruption during key import.