mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-08-30 06:49:56 +00:00
Modify ChangeLog entry to full plaintext recovery
Signed-off-by: David Horstmann <[email protected]>
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
Security
|
||||
* Fix a timing side channel in the implementation of PKCS#7 padding
|
||||
which would allow an attacker who can request decryption of arbitrary
|
||||
ciphertexts to recover the last byte of each block of the plaintext.
|
||||
ciphertexts to recover the plaintext through a timing oracle attack.
|
||||
|
||||
Reference in New Issue
Block a user