dumb 6979f132dc fix: harden file permissions for sensitive data and add input validation ...

- Introduce HITLS_APP_UioOpenPrivate to create key files with 0600
  permissions, replacing open-then-chmod pattern to avoid TOCTOU race
- Migrate key/PKCS12/rand output paths to use private file creation
- Refactor PKCS12 generation to use GenBuff + private UIO write
- Add null check for confirmP.data in SPAKE2+ RespDerive
- Add max length validation for private pass token challenge requests
- Reject AEAD ciphers in enc command explicitly
- Add 30s handshake timeout on accepted TCP connections

Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1625

Signed-off-by: Dongjianwei001 <dongjianwei1@huawei.com>

2026-06-30 10:14:03 +08:00

..

include

fix: harden file permissions for sensitive data and add input validation

2026-06-30 10:14:03 +08:00

src

fix: harden file permissions for sensitive data and add input validation

2026-06-30 10:14:03 +08:00