Bug 193153 - [WebCrypto] AES-CBC should perform padding check after decryptions
Summary: [WebCrypto] AES-CBC should perform padding check after decryptions
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-01-04 12:19 PST by Jiewen Tan
Modified: 2019-01-04 12:53 PST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jiewen Tan 2019-01-04 12:19:44 PST 
AES-CBC should perform padding check after decryptions as suggested by Decrypt Step 3.-5. of https://www.w3.org/TR/WebCryptoAPI/#aes-cbc-operations.
Comment 1 Jiewen Tan 2019-01-04 12:53:32 PST 
Wait, I am wrong about this bug.

I believe CommonCrypto handles all those steps for us. If there is a padding issue, it should inform us. Otherwise, we treat the results as the plaintext without padding.