Many RSA Libraries Leave the Bleichenbacher Oracle Open

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Companion to An Ok/Err Result Is a Bleichenbacher Oracle . It showed that one library’s Ok / Err decrypt result is a deterministic Bleichenbacher oracle. That Ok / Err reveals the bit : was the PKCS#1 v1.5 padding valid? This post surveys which other implementations leak it. That bit leaks more than one way, and has since Bleichenbacher’s 1998 paper: in the response itself (behavioral,…

Read on hexproof.dev ↗