coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-08-01 17:27:46 +08:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/include/mbedtls
History
Janos Follath eaeff5b75a Add warning for PKCS 1.5 decryption 
Any timing variance dependant on the output of this function enables a
Bleichenbacher attack. It is extremely difficult to use safely.

In the Marvin attack paper
(https://people.redhat.com/~hkario/marvin/marvin-attack-paper.pdf) the
author suggests that implementations of PKCS 1.5 decryption that don't
include a countermeasure should be considered inherently dangerous.

They suggest that all libraries implement the same countermeasure, as
implementing different countermeasures across libraries enables the
Bleichenbacher attack as well.

This is extremely fragile and therefore we don't implement it. The use
of PKCS 1.5 in Mbed TLS implements the countermeasures recommended in
the TLS standard (7.4.7.1 of RFC 5246) and is not vulnerable.

Add a warning to PKCS 1.5 decryption to warn users about this.

Signed-off-by: Janos Follath <janos.follath@arm.com>
2024-01-22 15:58:57 +00:00
..
aes.h Update headers 2023-11-03 12:54:54 +00:00
aesni.h Update headers 2023-11-03 12:54:54 +00:00
arc4.h Update headers 2023-11-03 12:54:54 +00:00
aria.h Update headers 2023-11-03 12:54:54 +00:00
asn1.h Update headers 2023-11-03 12:54:54 +00:00
asn1write.h Update headers 2023-11-03 12:54:54 +00:00
base64.h Update headers 2023-11-03 12:54:54 +00:00
bignum.h Update headers 2023-11-03 12:54:54 +00:00
blowfish.h Update headers 2023-11-03 12:54:54 +00:00
bn_mul.h Update headers 2023-11-03 12:54:54 +00:00
camellia.h Update headers 2023-11-03 12:54:54 +00:00
ccm.h Update headers 2023-11-03 12:54:54 +00:00
certs.h Update headers 2023-11-03 12:54:54 +00:00
chacha20.h Update headers 2023-11-03 12:54:54 +00:00
chachapoly.h Update headers 2023-11-03 12:54:54 +00:00
check_config.h Update headers 2023-11-03 12:54:54 +00:00
cipher_internal.h Update headers 2023-11-03 12:54:54 +00:00
cipher.h Update headers 2023-11-03 12:54:54 +00:00
cmac.h Update headers 2023-11-03 12:54:54 +00:00
compat-1.3.h Update headers 2023-11-03 12:54:54 +00:00
config_psa.h Update headers 2023-11-03 12:54:54 +00:00
config.h Add docs re Everest license 2023-11-08 11:41:55 +00:00
constant_time.h Update headers 2023-11-03 12:54:54 +00:00
ctr_drbg.h Update headers 2023-11-03 12:54:54 +00:00
debug.h Update headers 2023-11-03 12:54:54 +00:00
des.h Update headers 2023-11-03 12:54:54 +00:00
dhm.h Update headers 2023-11-03 12:54:54 +00:00
ecdh.h Update headers 2023-11-03 12:54:54 +00:00
ecdsa.h Update headers 2023-11-03 12:54:54 +00:00
ecjpake.h Update headers 2023-11-03 12:54:54 +00:00
ecp_internal.h Update headers 2023-11-03 12:54:54 +00:00
ecp.h Update headers 2023-11-03 12:54:54 +00:00
entropy_poll.h Update headers 2023-11-03 12:54:54 +00:00
entropy.h Update headers 2023-11-03 12:54:54 +00:00
error.h Update headers 2023-11-03 12:54:54 +00:00
gcm.h Update headers 2023-11-03 12:54:54 +00:00
havege.h Update headers 2023-11-03 12:54:54 +00:00
hkdf.h Update headers 2023-11-03 12:54:54 +00:00
hmac_drbg.h Update headers 2023-11-03 12:54:54 +00:00
md2.h Update headers 2023-11-03 12:54:54 +00:00
md4.h Update headers 2023-11-03 12:54:54 +00:00
md5.h Update headers 2023-11-03 12:54:54 +00:00
md_internal.h Update headers 2023-11-03 12:54:54 +00:00
md.h Update headers 2023-11-03 12:54:54 +00:00
memory_buffer_alloc.h Update headers 2023-11-03 12:54:54 +00:00
net_sockets.h Update headers 2023-11-03 12:54:54 +00:00
net.h Update headers 2023-11-03 12:54:54 +00:00
nist_kw.h Update headers 2023-11-03 12:54:54 +00:00
oid.h Update headers 2023-11-03 12:54:54 +00:00
padlock.h Update headers 2023-11-03 12:54:54 +00:00
pem.h Update headers 2023-11-03 12:54:54 +00:00
pk_internal.h Update headers 2023-11-03 12:54:54 +00:00
pk.h Update headers 2023-11-03 12:54:54 +00:00
pkcs5.h Update headers 2023-11-03 12:54:54 +00:00
pkcs11.h Update headers 2023-11-03 12:54:54 +00:00
pkcs12.h Update headers 2023-11-03 12:54:54 +00:00
platform_time.h Update headers 2023-11-03 12:54:54 +00:00
platform_util.h Update headers 2023-11-03 12:54:54 +00:00
platform.h Update headers 2023-11-03 12:54:54 +00:00
poly1305.h Update headers 2023-11-03 12:54:54 +00:00
psa_util.h Update headers 2023-11-03 12:54:54 +00:00
ripemd160.h Update headers 2023-11-03 12:54:54 +00:00
rsa_internal.h Update headers 2023-11-03 12:54:54 +00:00
rsa.h Add warning for PKCS 1.5 decryption 2024-01-22 15:58:57 +00:00
sha1.h Update headers 2023-11-03 12:54:54 +00:00
sha256.h Update headers 2023-11-03 12:54:54 +00:00
sha512.h Update headers 2023-11-03 12:54:54 +00:00
ssl_cache.h Update headers 2023-11-03 12:54:54 +00:00
ssl_ciphersuites.h Update headers 2023-11-03 12:54:54 +00:00
ssl_cookie.h Update headers 2023-11-03 12:54:54 +00:00
ssl_internal.h Update headers 2023-11-03 12:54:54 +00:00
ssl_ticket.h Update headers 2023-11-03 12:54:54 +00:00
ssl.h Update headers 2023-11-03 12:54:54 +00:00
threading.h Update headers 2023-11-03 12:54:54 +00:00
timing.h Update headers 2023-11-03 12:54:54 +00:00
version.h Bump version 2023-11-03 13:02:18 +00:00
x509_crl.h Update headers 2023-11-03 12:54:54 +00:00
x509_crt.h Update headers 2023-11-03 12:54:54 +00:00
x509_csr.h Update headers 2023-11-03 12:54:54 +00:00
x509.h Update headers 2023-11-03 12:54:54 +00:00
xtea.h Update headers 2023-11-03 12:54:54 +00:00