]> Cypherpunks repositories - gostls13.git/commit
crypto/rsa: make DecryptPKCS1v15SessionKey warning more dire
authorRoland Shoemaker <roland@golang.org>
Fri, 17 Feb 2023 19:14:49 +0000 (11:14 -0800)
committerGopher Robot <gobot@golang.org>
Tue, 23 May 2023 17:30:20 +0000 (17:30 +0000)
commitf96e193320d168a39b0f557f78cd3a9123ebff0b
tree95e86ee8a5e70c4ec7e7ea4336974caac96f46ee
parentd6473a12637945ca88966f6658da663abcbd508b
crypto/rsa: make DecryptPKCS1v15SessionKey warning more dire

Updates the DecryptPKCS1v15SessionKey function comment to be less cut
and dry about its protections against Bleichenbacher attacks. In
particular note that the protocol using this method must be explicitly
designed with these mitigations in mind, and call out usages which
may cause the migiations to be useless.

Change-Id: I06fd25157f12a3afb401bb08dff4faef7fb0a9b0
Reviewed-on: https://go-review.googlesource.com/c/go/+/469235
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: David Chase <drchase@google.com>
src/crypto/rsa/pkcs1v15.go