Use case: verify signatures (upload -> validity report) #16

Closed

EduarD3V wants to merge 0 commits from issue/8-use-case-verify-signatures-upl into bullet-develop

EduarD3V commented

2026-10-14 12:33:34 +02:00

Owner

Implements #8.

Refs #8

Automated by bullet: reviewed (independent model) → gates green on merged tree. Auto-merge follows.

Implements **#8**. Refs #8 Automated by bullet: reviewed (independent model) → gates green on merged tree. Auto-merge follows.

EduarD3V added 7 commits

2026-10-14 12:33:35 +02:00

verify: DER/X.509/CMS engine for CAdES verification (Refs #8 ) 52d7555217

Hand-rolled DER reader, certificate parsing, WebCrypto signature verification and
issuer-link chain building; CAdES checks: structure, messageDigest vs content,
signature over re-encoded signedAttrs, signer cert, validity, chain, signingTime.

verify: XML canonicalization and XAdES verification with bundled FNMT root (Refs #8 ) 0f1161da2d

C14N 1.0 inclusive + exclusive (no comments) with the enveloped-signature transform,
XMLDSig SignedInfo signature and per-Reference digest checks, xades:SigningTime, and the
FNMT AC RAIZ FNMT-RCM trust anchor refreshed by scripts/fetch-roots.sh (fingerprint asserted).

web: verify mode with a per-check green/red validity report (Refs #8 ) 6b1172cde5

Sign/Verify tablist, drop-a-signature step, per-check cards with the technical reason,
signer/validity/signing-time summary and an optional original document for detached CAdES.

test: valid/tampered CAdES+XAdES fixtures, openssl cross-check, verifier tests (Refs #8 ) c691f2d7ba

Throwaway test PKI (keys gitignored), generator and openssl/python cross-check script, C14N
oracle vectors from python ElementTree.canonicalize, and vitest coverage of every check path.

docs: verify flow, trust anchors and fixtures in web/README (Refs #8 ) 1cefd5a93f

test: fail the signature check when the signature bytes themselves are tampered with (Refs #8 ) b0b3896cf4

The fixtures only tampered with the content, so nothing exercised the
cryptographic check on its own failure path. Flip a byte inside the CMS
signature OCTET STRING and inside the XAdES SignatureValue instead.

review: red structure card instead of crash on malformed input, fix BIT STRING trimming, mark fixture CRLF deliberate (Refs #8 ) 38de4931cc

EduarD3V referenced this pull request

2026-10-14 12:33:37 +02:00

Use case: verify signatures (upload -> validity report) #8

EduarD3V referenced this pull request

2026-10-14 12:33:42 +02:00

bullet: integrated work for human review #15

EduarD3V referenced this pull request

2026-10-14 12:52:35 +02:00

bullet: integrated work for human review #18

EduarD3V closed this pull request

2026-10-14 13:21:54 +02:00