Description
In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an "OAEP side channel" attack.
Unscored
CVE-2016-8871
EUVD-2016-9696GHSA-7mvj-5457-q9m3
In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient …
Published Oct 28, 2016 · Updated Aug 6, 2024 · Assigned by mitre