go/src/crypto
Roland Shoemaker f96e193320 crypto/rsa: make DecryptPKCS1v15SessionKey warning more dire
Updates the DecryptPKCS1v15SessionKey function comment to be less cut
and dry about its protections against Bleichenbacher attacks. In
particular note that the protocol using this method must be explicitly
designed with these mitigations in mind, and call out usages which
may cause the migiations to be useless.

Change-Id: I06fd25157f12a3afb401bb08dff4faef7fb0a9b0
Reviewed-on: https://go-review.googlesource.com/c/go/+/469235
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: David Chase <drchase@google.com>
2023-05-23 17:30:20 +00:00
..
aes cmd/internal/obj/ppc64: modify PCALIGN to ensure alignment 2023-04-21 16:47:45 +00:00
boring crypto/internal/boring: update to newer boringcrypto, add arm64 2022-08-18 21:28:09 +00:00
cipher crypto: use bytes.Clone 2022-09-28 03:55:33 +00:00
des crypto/des: fix a typo in the comment for permuteFinalBlock 2022-12-01 21:00:43 +00:00
dsa
ecdh crypto/ecdh: explicitly reject mismatched curves in ECDH 2023-02-06 21:22:50 +00:00
ecdsa crypto/ecdsa: verify validity of signature parameters in Verify 2022-12-01 17:28:18 +00:00
ed25519 crypto/ed25519,crypto/rsa: make Equal methods constant time 2023-05-17 14:48:13 +00:00
elliptic crypto: use t.Parallel() to increase speed 2023-04-27 02:00:03 +00:00
hmac all: fix some problematic comments 2023-03-13 16:49:45 +00:00
internal Revert "crypto/sha1: add WriteString and WriteByte method" 2023-05-03 21:27:16 +00:00
md5 all: move //go: function directives directly above functions 2023-03-02 22:56:35 +00:00
rand crypto: add wasip1 support 2023-04-11 20:54:07 +00:00
rc4 crypto/internal/subtle: rename to crypto/internal/alias 2022-08-17 18:46:05 +00:00
rsa crypto/rsa: make DecryptPKCS1v15SessionKey warning more dire 2023-05-23 17:30:20 +00:00
sha1 Revert "crypto/sha1: add WriteString and WriteByte method" 2023-05-03 21:27:16 +00:00
sha256 Revert "crypto/sha256: add WriteString and WriteByte method" 2023-05-03 21:21:42 +00:00
sha512 Revert "crypto/sha512: add WriteString and WriteByte method" 2023-05-03 21:17:08 +00:00
subtle crypto/subtle: don't cast to *uintptr when word size is 0 2023-03-31 23:25:07 +00:00
tls crypto/tls: fix PSK binder calculation 2023-04-24 13:35:52 +00:00
x509 crypto/x509: fix certificate validation with FQDN on Windows 2023-05-17 21:01:16 +00:00
crypto.go all: gofmt main repo 2022-04-11 16:34:30 +00:00
issue21104_test.go