Modify ChangeLog entry to full plaintext recovery

Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann
2025-03-28 17:31:15 +00:00
parent b2b1c3bb81
commit bbf1a01503

View File

@@ -1,4 +1,4 @@
Security
* Fix a timing side channel in the implementation of PKCS#7 padding
which would allow an attacker who can request decryption of arbitrary
ciphertexts to recover the last byte of each block of the plaintext.
ciphertexts to recover the plaintext through a timing oracle attack.