| module: github.com/square/go-jose |
| package: github.com/square/go-jose/cipher |
| - module: github.com/square/go-jose |
| - JsonWebEncryption.Decrypt |
| - JsonWebEncryption.DecryptMulti |
| - fixed: v0.0.0-20160903044734-789a4c4bd4c1 |
| On 32-bit platforms an attacker can manipulate a ciphertext encrypted with AES-CBC |
| with HMAC such that they can control how large the input buffer is when computing |
| the HMAC authentication tag. This can can allow a manipulated ciphertext to be |
| verified as authentic, opening the door for padding oracle attacks. |
| published: 2021-04-14T12:00:00Z |
| credit: Quan Nguyen from Google's Information Security Engineering Team |
| commit: https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96 |
| - https://www.openwall.com/lists/oss-security/2016/11/03/1 |
