[Bug 25431] Error names allow RSAES-PKCS1-v1_5 oracle attack against wrapped keys

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25431

Richard Barnes <rlb@ipv.sx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rlb@ipv.sx

--- Comment #2 from Richard Barnes <rlb@ipv.sx> ---
The changes needed to make this safe would make the API even more cryptic to
devs than it already is.  I would prefer to just drop RSAES-PKCS1-v1_5 from
unwrapKey.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Tuesday, 29 April 2014 23:05:19 UTC