mirror of
https://github.com/yuzu-mirror/mbedtls.git
synced 2025-12-06 07:12:32 +01:00
7 lines
326 B
Plaintext
7 lines
326 B
Plaintext
|
Security
|
||
|
|
* Fix non-constant-time behaviour in padding calculations in CBC
|
||
|
|
decryption, NIST SP 800-38F key wrapping, and RSAAES-OAEP decryption.
|
||
|
|
For CBC and RSAAES-OAEP, this may have been exploitable in a
|
||
|
|
padding oracle for a privileged local attacker with the ability to
|
||
|
|
observe memory access timings.
|