Changelog entry for PSA CBC-PKCS7 padding oracle fix

Signed-off-by: Gilles Peskine <[email protected]>
2026-08-05 11:07:47 +00:00 · 2025-09-08 12:22:39 +02:00
parent 04dfd70432
commit 2d666646ba
1 changed files with 5 additions and 0 deletions
@@ -0,0 +1,5 @@
+Security
+   * Fix a timing side channel in CBC-PKCS7 decryption that could
+     allow an attacker who can submit chosen ciphertexts to recover
+     some plaintexts through a timing-based padding oracle attack.
+     Credits to Beat Heeb from Oberon microsystems AG. CVE-TODO