dotnet / dotnet/dotnet-api-docs
warning of timing vulnerability with CBC-mode symmetric decryption using padding.
Open
area-System.Security
Pri3
untriaged
- Dominant language
- C#
- Stars
- 949
- Forks
- 1.7k
- Avg merge
- 3d 27m
- Merged PRs (30d)
- 49
Description
See https://github.com/dotnet/dotnet-api-docs/pull/2609#issuecomment-503748558
The following algorithms are all affected:
- [ ] Aes
- [ ] AesCng
- [ ] AesCryptoServiceProvider
- [ ] AesManaged
- [ ] DES
- [ ] DESCryptoServiceProvider
- [ ] RC2
- [ ] RC2CryptoServiceProvider
- [ ] Rijndael
- [ ] RijndaelManaged
- [ ] TripleDES
- [ ] TripleDESCng
- [ ] TripleDESCryptoServiceProvider
Contributor guide
Assessment
This issue has not been assessed yet.