Modify ChangeLog entry to full plaintext recovery

Signed-off-by: David Horstmann <[email protected]>
This commit is contained in:
David Horstmann
2025-03-28 17:31:15 +00:00
parent b2b1c3bb81
commit bbf1a01503
@@ -1,4 +1,4 @@
Security Security
* Fix a timing side channel in the implementation of PKCS#7 padding * Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the last byte of each block of the plaintext. ciphertexts to recover the plaintext through a timing oracle attack.