Actions
Feature #12864
open
Have pkcs11_softtoken's DES[3]_CBC_PAD mechanism use the cbc_pad mode
Start date:
Due date:
% Done:
0%
Estimated time:
Difficulty:
Medium
Tags:
Gerrit CR:
External Bug:
Description
Similar to #11825, it appears the DES_CBC_PAD and DES3_CBC_PAD mechanisms are broken in pkcs11_softtoken (as found by Google's pkcs11 test suite). While hopefully no one has to use these (and indeed, these appear to have been broken for years without any reports of issues, suggested they aren't), on the chance someone is forced to use these, we should provide correct implementations.
Related issues
Updated by Jason King over 3 years ago
- Related to Feature #12863: Make cbc_pad its own mode added
Updated by Jason King over 3 years ago
- Related to Bug #11825: PKCS#11 CKM_AES_CBC_PAD decryption can fail added
Actions