coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1424 from gilles-peskine-arm/pkcs7-padding-error-timing-leak-cveid-3.6

Browse Source 
CVE ID for PKCS7 padding timing leak in psa_cipher_finish
This commit is contained in:
Gilles Peskine 2025-09-16 16:10:56 +02:00 committed by GitHub
commit 64d4c3675a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog.d/pkcs7-padding-error-leak.txt
View File

@ -2,4 +2,4 @@ Security
* Fix a timing side channel in CBC-PKCS7 decryption that could
allow an attacker who can submit chosen ciphertexts to recover
some plaintexts through a timing-based padding oracle attack.
Credits to Beat Heeb from Oberon microsystems AG. CVE-TODO
Credits to Beat Heeb from Oberon microsystems AG. CVE-2025-59438