mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-04-01 18:21:07 +02:00
Modify ChangeLog entry to full plaintext recovery
Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
Security
|
||||
* Fix a timing side channel in the implementation of PKCS#7 padding
|
||||
which would allow an attacker who can request decryption of arbitrary
|
||||
ciphertexts to recover the last byte of each block of the plaintext.
|
||||
ciphertexts to recover the plaintext through a timing oracle attack.
|
||||
|
||||
Reference in New Issue
Block a user