Add credit to the reporters of the PKCS7 issue

Signed-off-by: David Horstmann <[email protected]>
2026-10-21 16:27:57 +00:00 · 2025-05-14 15:45:00 +01:00
parent 219c3368eb
commit ddbf8d030a
1 changed files with 2 additions and 0 deletions
@@ -2,3 +2,5 @@ Security
   * Fix a timing side channel in the implementation of PKCS#7 padding
     which would allow an attacker who can request decryption of arbitrary
     ciphertexts to recover the plaintext through a timing oracle attack.
+     Reported by Ka Lok Wu from Stony Brook University and Doria Tang from
+     The Chinese University of Hong Kong.