diff options
| author | Michael Brown | 2022-11-08 16:10:25 +0100 |
|---|---|---|
| committer | Michael Brown | 2022-11-08 16:14:06 +0100 |
| commit | 186306d6199096b7a7c4b4574d4be8cdb8426729 (patch) | |
| tree | 6cf369ae4a95f936ebdef95284caa64c7f0db025 /src/net/validator.c | |
| parent | [tls] Allow for arbitrary-length initialisation vectors (diff) | |
| download | ipxe-186306d6199096b7a7c4b4574d4be8cdb8426729.tar.gz ipxe-186306d6199096b7a7c4b4574d4be8cdb8426729.tar.xz ipxe-186306d6199096b7a7c4b4574d4be8cdb8426729.zip | |
[tls] Treat invalid block padding as zero length padding
Harden against padding oracle attacks by treating invalid block
padding as zero length padding, thereby deferring the failure until
after computing the (incorrect) MAC.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/net/validator.c')
0 files changed, 0 insertions, 0 deletions