mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-09-14 22:29:57 +00:00
Modify ChangeLog entry to full plaintext recovery
Signed-off-by: David Horstmann <[email protected]>
This commit is contained in:
@@ -1,4 +1,4 @@
|
|||||||
Security
|
Security
|
||||||
* Fix a timing side channel in the implementation of PKCS#7 padding
|
* Fix a timing side channel in the implementation of PKCS#7 padding
|
||||||
which would allow an attacker who can request decryption of arbitrary
|
which would allow an attacker who can request decryption of arbitrary
|
||||||
ciphertexts to recover the last byte of each block of the plaintext.
|
ciphertexts to recover the plaintext through a timing oracle attack.
|
||||||
|
|||||||
Reference in New Issue
Block a user