espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2025-07-12 08:34:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add credit to the reporters of the PKCS7 issue

Browse Source 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann 2025-05-14 15:45:00 +01:00
parent 219c3368eb
commit ddbf8d030a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog.d/pkcs7-padding-side-channel-fix.txt
View File

@ -2,3 +2,5 @@ Security
* Fix a timing side channel in the implementation of PKCS#7 padding * Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the plaintext through a timing oracle attack. ciphertexts to recover the plaintext through a timing oracle attack.
Reported by Ka Lok Wu from Stony Brook University and Doria Tang from
The Chinese University of Hong Kong.