Add ChangeLog entry for PKCS#7 side channel fix

Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann
2025-01-22 11:18:14 +00:00
parent 652ea21737
commit 1667455992

View File

@@ -0,0 +1,4 @@
Security
* Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the last byte of each block of the plaintext.