Mbed-TLS/mbedtls-framework
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls-framework.git synced 2026-09-20 08:57:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1084 from daverodgman/update-ct-changelog

Browse Source 
Update padding const-time fix changelog
This commit is contained in:
Dave Rodgman
2023-09-28 11:34:07 +01:00
committed by GitHub
parent 641250f42b e614129895
commit 3a098e9090
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/padding-ct-changelog.txt
+3 -3
View File
@@ -1,6 +1,6 @@
Security
* Improve padding calculations in CBC decryption, NIST key unwrapping and
RSA OAEP decryption. With the previous implementation, some compilers
(notably recent versions of Clang) could produce non-constant time code,
which could allow a padding oracle attack if the attacker has access to
precise timing measurements.
(notably recent versions of Clang and IAR) could produce non-constant
time code, which could allow a padding oracle attack if the attacker
has access to precise timing measurements.