`decrypt_session_key` does not exist but is referred

Open
#565 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
1/5
Estimated time
1-3 hours
Newbie friendliness
45/100
Issue type
Documentation
Clarity
Mostly clear
Activity status
Stale
Tech stack
rust
Domain
cryptography

Research direction

Search the decrypt_session_key references in algorithms/pkcs1v15.rs, algorithms/oaep.rs, oaep.rs, and pkcs1v15.rs. Read the surrounding documentation and identify the intended existing guidance or API; done means the references no longer point to a nonexistent item and the security explanation remains clear.

Written by the indexing model from the issue text.

Description

/// Decrypts a plaintext using RSA and the padding scheme from PKCS#1 v1.5.                                          
///                                                                                                                  
/// If an `rng` is passed, it uses RSA blinding to avoid timing side-channel attacks.                                
///                                                                                                                  
/// Note that whether this function returns an error or not discloses secret                                         
/// information. If an attacker can cause this function to run repeatedly and                                        
/// learn whether each instance returned an error then they can decrypt and                                          
/// forge signatures as if they had the private key. See                                                             
/// `decrypt_session_key` for a way of solving this problem.  

It's in bunch of places

algorithms/pkcs1v15.rs:/// `decrypt_session_key` for a way of solving this problem.
algorithms/oaep.rs:/// See `decrypt_session_key` for a way of solving this problem.
algorithms/oaep.rs:/// See `decrypt_session_key` for a way of solving this problem.
oaep.rs:/// See `decrypt_session_key` for a way of solving this problem.
oaep.rs:/// See `decrypt_session_key` for a way of solving this problem.
pkcs1v15.rs:/// `decrypt_session_key` for a way of solving this problem.

Might want to clarify this.

Dominant language
Rust
Stars
673
Forks
190
PR merge metrics
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from RustCrypto/RSA

All issues in RustCrypto/RSA

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.