cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-22 12:00:35 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1345 from davidhorstmann-arm/pkcs7-side-channel-missing-credit-3.6

Browse Source 
Add credit to the reporters of the PKCS7 issue
This commit is contained in:
Manuel Pégourié-Gonnard 2025-05-28 11:49:35 +02:00 committed by GitHub
commit d9c141749b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog.d/pkcs7-padding-side-channel-fix.txt
View File

@ -2,3 +2,5 @@ Security
* Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the plaintext through a timing oracle attack.
Reported by Ka Lok Wu from Stony Brook University and Doria Tang from
The Chinese University of Hong Kong.