frankmorgner · GitHub

frankmorgner

approved these changes Dec 13, 2023

@xhanulik

@frankmorgner

popovec

tomato42

tomato42

@xhanulik

@xhanulik

xhanulik marked this pull request as ready for review

December 21, 2023 11:27

@xhanulik

Merged

@xhanulik

frankmorgner

@xhanulik

@xhanulik

frankmorgner

To prevent Marvin attack on RSA PKCS#1 v1.5 padding
when logging the return value, signaling the padding error.
In order to not disclose time side-channel when the depadding
fails, do the same operations as for case when depadding ends
with success.
To prevent Marvin attack on RSA PKCS#1 v1.5 padding
when logging the return value, signaling the padding error.

@xhanulik

@Jakuje

Closed

@xhanulik

jpuhlman pushed a commit to MontaVista-OpenSourceTechnology/meta-openembedded that referenced this pull request

Nov 14, 2025

Read the original on github.com ↗