approved these changes Dec 13, 2023
xhanulik marked this pull request as ready for review
December 21, 2023 11:27To prevent Marvin attack on RSA PKCS#1 v1.5 padding when logging the return value, signaling the padding error.
In order to not disclose time side-channel when the depadding fails, do the same operations as for case when depadding ends with success.
To prevent Marvin attack on RSA PKCS#1 v1.5 padding when logging the return value, signaling the padding error.
Closed
jpuhlman pushed a commit to MontaVista-OpenSourceTechnology/meta-openembedded that referenced this pull request
Nov 14, 2025