feat(cms): Tier 1 behavioral fuzzers + fix two RFC 5652 bypasses#13

Merged

jamestexas merged 6 commits into

mainfrom

feat/behavioral-fuzzers

May 19, 2026

Commits on May 19, 2026

feat(cms): behavioral roundtrip fuzzers + fix two findings

jamestexas
and
claude
committed
feat(cms): Tier 2 fuzzers + DER strict-length fix + concurrency tests

jamestexas
and
claude
committed
test(cms): Tier 3 algorithm-OID, signature-region, cert-bag probes

jamestexas
and
claude
committed
ci(security): re-enable gosec G115, add govulncheck, fuzz coverage

jamestexas
and
claude
committed
ci: bump go to 1.25.5 to clear 11 stdlib CVEs surfaced by govulncheck

jamestexas
and
claude
committed
ci: anchor fuzz target regexes so FuzzVerify doesn't match FuzzVerifyAcceptsOnlyCanonicalForm (go test refuses multi-match)
jamestexas
committed