mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-03-29 08:31:06 +02:00
New padding checking is unbiased on correct or incorrect padding and has no branch prediction timing differences. The additional MAC checks further straighten out the timing differences.