TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-05-05 01:23:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1082 from daverodgman/padding-ct-changelog-2.28

Browse Source 
Backport 2.28: Add Changelog for CT fixes
This commit is contained in:
Dave Rodgman
2023-09-25 14:02:16 +01:00
committed by GitHub
parent 0ab94d1239 e8358d400f
commit fb6f2cc9d7
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog.d/padding-ct-changelog.txt Normal file
View File

@@ -0,0 +1,6 @@
Security
* Improve padding calculations in CBC decryption, NIST key unwrapping and
RSA OAEP decryption. With the previous implementation, some compilers
(notably recent versions of Clang) could produce non-constant time code,
which could allow a padding oracle attack if the attacker has access to
precise timing measurements.