Bug 193153
| Summary: | [WebCrypto] AES-CBC should perform padding check after decryptions | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Jiewen Tan <jiewen_tan> |
| Component: | WebCore Misc. | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED INVALID | ||
| Severity: | Normal | CC: | jiewen_tan |
| Priority: | P2 | ||
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Jiewen Tan
AES-CBC should perform padding check after decryptions as suggested by Decrypt Step 3.-5. of https://www.w3.org/TR/WebCryptoAPI/#aes-cbc-operations.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Jiewen Tan
Wait, I am wrong about this bug.
I believe CommonCrypto handles all those steps for us. If there is a padding issue, it should inform us. Otherwise, we treat the results as the plaintext without padding.