mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-05-13 15:24:05 +02:00
New padding checking is unbiased on correct or incorrect padding and has no branch prediction timing differences. The additional MAC checks further straighten out the timing differences.