lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

Merge pull request #1345 from davidhorstmann-arm/pkcs7-side-channel-missing-credit-3.6

Browse Source 
Add credit to the reporters of the PKCS7 issue
This commit is contained in:
Manuel Pégourié-Gonnard
2025-05-28 11:49:35 +02:00
committed by GitHub
parent 1e9267c993 ddbf8d030a
commit d9c141749b
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog.d/pkcs7-padding-side-channel-fix.txt
View File

@ -2,3 +2,5 @@ Security
* Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the plaintext through a timing oracle attack.
Reported by Ka Lok Wu from Stony Brook University and Doria Tang from
The Chinese University of Hong Kong.