Harden ASN.1 stream materialization, add id-kp-imUri, and lower PBE iteration ceiling

CryptoLib.Tests/Delphi.Tests/CryptoLib.Tests.Mobile.dpr

@@ -827,6 +827,8 @@ uses
   ExternalTests in '..\src\Asn1\ExternalTests.pas',
   GeneralizedTimeTests in '..\src\Asn1\GeneralizedTimeTests.pas',
   InputStreamTests in '..\src\Asn1\InputStreamTests.pas',
+  DefiniteLengthAllocationTests in '..\src\Asn1\DefiniteLengthAllocationTests.pas',
+  Asn1StreamReadTests in '..\src\Asn1\Asn1StreamReadTests.pas',
   OctetStringTests in '..\src\Asn1\OctetStringTests.pas',
   OIDTests in '..\src\Asn1\OIDTests.pas',
   ParseTests in '..\src\Asn1\ParseTests.pas',
@@ -920,6 +922,7 @@ uses
   IetfUtilitiesTests in '..\src\Asn1\X500\IetfUtilitiesTests.pas',
   GeneralNameTests in '..\src\Asn1\X509\GeneralNameTests.pas',
   KeyUsageTests in '..\src\Asn1\X509\KeyUsageTests.pas',
+  KeyPurposeIDTests in '..\src\Asn1\X509\KeyPurposeIDTests.pas',
   SubjectKeyIdentifierTests in '..\src\Asn1\X509\SubjectKeyIdentifierTests.pas',
   X509AltTests in '..\src\Asn1\X509\X509AltTests.pas',
   X509ExtensionsTests in '..\src\Asn1\X509\X509ExtensionsTests.pas',

CryptoLib.Tests/Delphi.Tests/CryptoLib.Tests.Mobile.dproj

@@ -1170,6 +1170,8 @@
         <DCCReference Include="..\src\Asn1\ExternalTests.pas"/>
         <DCCReference Include="..\src\Asn1\GeneralizedTimeTests.pas"/>
         <DCCReference Include="..\src\Asn1\InputStreamTests.pas"/>
+        <DCCReference Include="..\src\Asn1\DefiniteLengthAllocationTests.pas"/>
+        <DCCReference Include="..\src\Asn1\Asn1StreamReadTests.pas"/>
         <DCCReference Include="..\src\Asn1\OctetStringTests.pas"/>
         <DCCReference Include="..\src\Asn1\OIDTests.pas"/>
         <DCCReference Include="..\src\Asn1\ParseTests.pas"/>
@@ -1258,6 +1260,7 @@
         <DCCReference Include="..\src\Asn1\X500\IetfUtilitiesTests.pas"/>
         <DCCReference Include="..\src\Asn1\X509\GeneralNameTests.pas"/>
         <DCCReference Include="..\src\Asn1\X509\KeyUsageTests.pas"/>
+        <DCCReference Include="..\src\Asn1\X509\KeyPurposeIDTests.pas"/>
         <DCCReference Include="..\src\Asn1\X509\SubjectKeyIdentifierTests.pas"/>
         <DCCReference Include="..\src\Asn1\X509\X509AltTests.pas"/>
         <DCCReference Include="..\src\Asn1\X509\X509ExtensionsTests.pas"/>

CryptoLib.Tests/Delphi.Tests/CryptoLib.Tests.dpr

@@ -846,6 +846,8 @@ uses
   ExternalTests in '..\src\Asn1\ExternalTests.pas',
   GeneralizedTimeTests in '..\src\Asn1\GeneralizedTimeTests.pas',
   InputStreamTests in '..\src\Asn1\InputStreamTests.pas',
+  DefiniteLengthAllocationTests in '..\src\Asn1\DefiniteLengthAllocationTests.pas',
+  Asn1StreamReadTests in '..\src\Asn1\Asn1StreamReadTests.pas',
   OctetStringTests in '..\src\Asn1\OctetStringTests.pas',
   OIDTests in '..\src\Asn1\OIDTests.pas',
   ParseTests in '..\src\Asn1\ParseTests.pas',
@@ -939,6 +941,7 @@ uses
   IetfUtilitiesTests in '..\src\Asn1\X500\IetfUtilitiesTests.pas',
   GeneralNameTests in '..\src\Asn1\X509\GeneralNameTests.pas',
   KeyUsageTests in '..\src\Asn1\X509\KeyUsageTests.pas',
+  KeyPurposeIDTests in '..\src\Asn1\X509\KeyPurposeIDTests.pas',
   SubjectKeyIdentifierTests in '..\src\Asn1\X509\SubjectKeyIdentifierTests.pas',
   X509AltTests in '..\src\Asn1\X509\X509AltTests.pas',
   X509ExtensionsTests in '..\src\Asn1\X509\X509ExtensionsTests.pas',

CryptoLib.Tests/FreePascal.Tests/CryptoLib.Tests.lpi

@@ -79,7 +79,7 @@
         <PackageName Value="FCL"/>
       </Item4>
     </RequiredPackages>
-    <Units Count="186">
+    <Units Count="189">
       <Unit0>
         <Filename Value="CryptoLib.lpr"/>
         <IsPartOfProject Value="True"/>
@@ -825,6 +825,18 @@
         <Filename Value="..\src\Crypto\GcmSivBulkParityTests.pas"/>
         <IsPartOfProject Value="True"/>
       </Unit185>
+      <Unit186>
+        <Filename Value="..\src\Asn1\DefiniteLengthAllocationTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit186>
+      <Unit187>
+        <Filename Value="..\src\Asn1\X509\KeyPurposeIDTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit187>
+      <Unit188>
+        <Filename Value="..\src\Asn1\Asn1StreamReadTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit188>
     </Units>
   </ProjectOptions>
   <CompilerOptions>

CryptoLib.Tests/FreePascal.Tests/CryptoLib.lpr

@@ -11,12 +11,12 @@
   NamedCurveTests, SignerUtilitiesTests, SecureRandomTests,
   DigestRandomNumberTests, FixedPointTests, AESTests, AesLightTests,
   FusedExternalRegistrationTests, AesHardwareEngineTests, AESSICTests,
-  SicBulkParityTests, EcbBulkParityTests, CbcBulkParityTests, GcmSivBulkParityTests,
-  SpeckBlockCipherTestBase, SpeckLegacyTests, SpeckTests, IESCipherTests,
-  HMacTests, Pkcs5Tests, HkdfGeneratorTests, ECIESTests, PascalCoinECIESTests,
-  ECNRTests, PrimesTests, ECEncodingTests, GF256AesTests, PaddingTests,
-  DSATests, DeterministicDsaTests, Salsa20Tests, XSalsa20Tests, ChaChaTests,
-  ChaCha7539ProcessBlocks2Tests, HChaCha20Tests, XChaCha20Tests,
+  SicBulkParityTests, EcbBulkParityTests, CbcBulkParityTests,
+  GcmSivBulkParityTests, SpeckBlockCipherTestBase, SpeckLegacyTests, SpeckTests,
+  IESCipherTests, HMacTests, Pkcs5Tests, HkdfGeneratorTests, ECIESTests,
+  PascalCoinECIESTests, ECNRTests, PrimesTests, ECEncodingTests, GF256AesTests,
+  PaddingTests, DSATests, DeterministicDsaTests, Salsa20Tests, XSalsa20Tests,
+  ChaChaTests, ChaCha7539ProcessBlocks2Tests, HChaCha20Tests, XChaCha20Tests,
   XChaCha20Poly1305Tests, StreamCipherResetTests, CTSTests, X25519Tests,
   X448Tests, Ed25519Tests, Ed448Tests, X25519HigherLevelTests,
   Ed25519HigherLevelTests, ShortenedDigestTests, Kdf1GeneratorTests,
@@ -27,15 +27,16 @@
   DHTests, Asn1IntegerTests, BitStringTests, GeneralizedTimeTests,
   OctetStringTests, RelativeOidTests, UtcTimeTests, InputStreamTests, SetTests,
   X9Tests, PrivateKeyInfoTests, DerUtf8StringTests,
-  EncryptedPrivateKeyInfoTests, Pkcs10CertRequestTests, DeltaCertificateTests,
+  EncryptedPrivateKeyInfoTests, DefiniteLengthAllocationTests,
+  Asn1StreamReadTests, Pkcs10CertRequestTests, DeltaCertificateTests,
   RelatedCertificateTests, CcmParametersTests, GcmParametersTests,
   CertificateTests, X509AltTests, X509ExtensionsTests,
   AuthorityKeyIdentifierTests, IdpRelativeNameTests, IetfUtilitiesTests,
   X509NameTests, SubjectKeyIdentifierTests, KeyUsageTests, GeneralNameTests,
-  KMacTests, RSATests, PssTests, ISO9796Tests, RSABlindedTests,
-  RSADigestSignerTests, X931SignerTests, CryptoIOStreamTests, CryptoIOSinkTests,
-  OaepTests, RijndaelTests, BlowfishTests, Poly1305Tests, MacTests,
-  ChaCha20Poly1305Tests, OcbTests, CcmTests, EaxTests, CMacTests,
+  KeyPurposeIDTests, KMacTests, RSATests, PssTests, ISO9796Tests,
+  RSABlindedTests, RSADigestSignerTests, X931SignerTests, CryptoIOStreamTests,
+  CryptoIOSinkTests, OaepTests, RijndaelTests, BlowfishTests, Poly1305Tests,
+  MacTests, ChaCha20Poly1305Tests, OcbTests, CcmTests, EaxTests, CMacTests,
   AeadTestUtilities, GcmReorderTests, GCMTests, GcmSivTests, GMacTests,
   Pkcs12Tests, Bip327MuSig2Tests, Bip340SchnorrTests, AlgorithmFinderTests,
   MlKemTests, MlDsaTests, PqcPkcsTests, SlhDsaTests, Lib25519Tests,

CryptoLib.Tests/FreePascal.Tests/CryptoLibConsole.lpi

@@ -39,7 +39,7 @@
         <PackageName Value="FCL"/>
       </Item2>
     </RequiredPackages>
-    <Units Count="186">
+    <Units Count="189">
       <Unit0>
         <Filename Value="CryptoLibConsole.lpr"/>
         <IsPartOfProject Value="True"/>
@@ -784,6 +784,18 @@
         <Filename Value="..\src\Crypto\GcmSivBulkParityTests.pas"/>
         <IsPartOfProject Value="True"/>
       </Unit185>
+      <Unit186>
+        <Filename Value="..\src\Asn1\DefiniteLengthAllocationTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit186>
+      <Unit187>
+        <Filename Value="..\src\Asn1\X509\KeyPurposeIDTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit187>
+      <Unit188>
+        <Filename Value="..\src\Asn1\Asn1StreamReadTests.pas"/>
+        <IsPartOfProject Value="True"/>
+      </Unit188>
     </Units>
   </ProjectOptions>
   <CompilerOptions>

CryptoLib.Tests/FreePascal.Tests/CryptoLibConsole.lpr

@@ -12,12 +12,12 @@
   NamedCurveTests, SignerUtilitiesTests, SecureRandomTests,
   DigestRandomNumberTests, FixedPointTests, AESTests, AesLightTests,
   FusedExternalRegistrationTests, AesHardwareEngineTests, AESSICTests,
-  SicBulkParityTests, EcbBulkParityTests, CbcBulkParityTests, GcmSivBulkParityTests,
-  SpeckBlockCipherTestBase, SpeckLegacyTests, SpeckTests, IESCipherTests,
-  HMacTests, Pkcs5Tests, HkdfGeneratorTests, ECIESTests, PascalCoinECIESTests,
-  ECNRTests, PrimesTests, ECEncodingTests, GF256AesTests, PaddingTests,
-  DSATests, DeterministicDsaTests, Salsa20Tests, XSalsa20Tests, ChaChaTests,
-  ChaCha7539ProcessBlocks2Tests, HChaCha20Tests, XChaCha20Tests,
+  SicBulkParityTests, EcbBulkParityTests, CbcBulkParityTests,
+  GcmSivBulkParityTests, SpeckBlockCipherTestBase, SpeckLegacyTests, SpeckTests,
+  IESCipherTests, HMacTests, Pkcs5Tests, HkdfGeneratorTests, ECIESTests,
+  PascalCoinECIESTests, ECNRTests, PrimesTests, ECEncodingTests, GF256AesTests,
+  PaddingTests, DSATests, DeterministicDsaTests, Salsa20Tests, XSalsa20Tests,
+  ChaChaTests, ChaCha7539ProcessBlocks2Tests, HChaCha20Tests, XChaCha20Tests,
   XChaCha20Poly1305Tests, StreamCipherResetTests, CTSTests, X25519Tests,
   X448Tests, Ed25519Tests, Ed448Tests, X25519HigherLevelTests,
   Ed25519HigherLevelTests, Curve25519KeyUtilitiesTests, ShortenedDigestTests,
@@ -28,19 +28,20 @@
   DHTests, Asn1IntegerTests, GeneralizedTimeTests, BitStringTests,
   InputStreamTests, UtcTimeTests, RelativeOidTests, OctetStringTests, SetTests,
   X9Tests, PrivateKeyInfoTests, DerUtf8StringTests,
-  EncryptedPrivateKeyInfoTests, Pkcs10CertRequestTests, DeltaCertificateTests,
+  EncryptedPrivateKeyInfoTests, DefiniteLengthAllocationTests,
+  Asn1StreamReadTests, Pkcs10CertRequestTests, DeltaCertificateTests,
   RelatedCertificateTests, CcmParametersTests, GcmParametersTests,
   CertificateTests, X509AltTests, X509ExtensionsTests,
   AuthorityKeyIdentifierTests, IdpRelativeNameTests, IetfUtilitiesTests,
   X509NameTests, SubjectKeyIdentifierTests, KeyUsageTests, GeneralNameTests,
-  KMacTests, PssTests, ISO9796Tests, RSABlindedTests, RSADigestSignerTests,
-  RSATests, X931SignerTests, CryptoIOStreamTests, CryptoIOSinkTests, OaepTests,
-  RijndaelTests, BlowfishTests, CcmTests, ChaCha20Poly1305Tests, CMacTests,
-  EaxTests, OcbTests, MacTests, Poly1305Tests, AeadTestUtilities,
-  GcmReorderTests, GCMTests, GcmSivTests, GMacTests, Pkcs12Tests,
-  Bip327MuSig2Tests, Bip340SchnorrTests, AlgorithmFinderTests, MlKemTests,
-  MlDsaTests, SlhDsaTests, PqcTestSampler, PqcPkcsTests, Lib25519Tests,
-  Asn1CipherBuilderWithKeyTests, CryptoLibTestBase, CtrDrbgTests,
+  KeyPurposeIDTests, KMacTests, PssTests, ISO9796Tests, RSABlindedTests,
+  RSADigestSignerTests, RSATests, X931SignerTests, CryptoIOStreamTests,
+  CryptoIOSinkTests, OaepTests, RijndaelTests, BlowfishTests, CcmTests,
+  ChaCha20Poly1305Tests, CMacTests, EaxTests, OcbTests, MacTests, Poly1305Tests,
+  AeadTestUtilities, GcmReorderTests, GCMTests, GcmSivTests, GMacTests,
+  Pkcs12Tests, Bip327MuSig2Tests, Bip340SchnorrTests, AlgorithmFinderTests,
+  MlKemTests, MlDsaTests, SlhDsaTests, PqcTestSampler, PqcPkcsTests,
+  Lib25519Tests, Asn1CipherBuilderWithKeyTests, CryptoLibTestBase, CtrDrbgTests,
   DrbgTestSupport, HashDrbgTests, HMacDrbgTests, SimdSelectSlotTests,
   BinaryPrimitivesTests, PkcsEncryptedPrivateKeyInfoTests, Pkcs12StoreTests,
   OpenSslReaderTests, OpenSslWriterTests, X509CertGenTests,