Open secure12 opened 2 years ago
PKCS1 padding is vulnerable to Bleichenbacher padding oracle attack. Both iOS and Android support PKCS1 OAEP with Sha1, which is the preferred padding in OpenSSL and the default padding in Node.js crypto library.
crypto
Any news on this?
PKCS1 padding is vulnerable to Bleichenbacher padding oracle attack. Both iOS and Android support PKCS1 OAEP with Sha1, which is the preferred padding in OpenSSL and the default padding in Node.js
crypto
library.