Profile

Hi Mike, The article you are (I think) referring to is an improvement to the attack, and the mitigation against the improvement is to disallow support for v1.5. If we recommended only to use v2 with OAEP, it would not be enough. That is why the recommendation is to both move to v2 and to disallow v1.5. ...

Hi Oscar, The recommendation to use OAEP (optimal asymmetric encryption padding), as the name implies, is referring to a padding scheme for encryption. Essentially the attack in question is a side channel attack against the padding, and moving to v2 with OAEP itself is not sufficient unless you also ...

Resending proposal without signature enabled for proper archival in the public domain. Apologies about the delay, as I was on vacation. Hi, A concern was raised on the wiki around extraction attacks (more specifically a padded oracle/Bleichenbaucher style attack). In general the protection lies in selection ...

Attachment: smime.p7m Description: S/MIME encrypted message