mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-09-13 14:22:19 +08:00
7 lines
326 B
Plaintext
7 lines
326 B
Plaintext
Security
|
|
* Fix non-constant-time behaviour in padding calculations in CBC
|
|
decryption, NIST SP 800-38F key wrapping, and RSAAES-OAEP decryption.
|
|
For CBC and RSAAES-OAEP, this may have been exploitable in a
|
|
padding oracle for a privileged local attacker with the ability to
|
|
observe memory access timings.
|