diff options
Diffstat (limited to 'doc/man1')
| -rw-r--r-- | doc/man1/openssl-pkeyutl.pod.in | 5 | ||||
| -rw-r--r-- | doc/man1/openssl-rsautl.pod.in | 5 |
2 files changed, 10 insertions, 0 deletions
diff --git a/doc/man1/openssl-pkeyutl.pod.in b/doc/man1/openssl-pkeyutl.pod.in index b0054ead66..b7c45caa23 100644 --- a/doc/man1/openssl-pkeyutl.pod.in +++ b/doc/man1/openssl-pkeyutl.pod.in @@ -240,6 +240,11 @@ signed or verified directly instead of using a B<DigestInfo> structure. If a digest is set then the a B<DigestInfo> structure is used and its the length must correspond to the digest type. +Note, for B<pkcs1> padding, as a protection against Bleichenbacher attack, +the decryption will not fail in case of padding check failures. Use B<none> +and manual inspection of the decrypted message to verify if the decrypted +value has correct PKCS#1 v1.5 padding. + For B<oaep> mode only encryption and decryption is supported. For B<x931> if the digest type is set it is used to format the block data diff --git a/doc/man1/openssl-rsautl.pod.in b/doc/man1/openssl-rsautl.pod.in index 186e49e5e4..eab34979de 100644 --- a/doc/man1/openssl-rsautl.pod.in +++ b/doc/man1/openssl-rsautl.pod.in @@ -105,6 +105,11 @@ The padding to use: PKCS#1 v1.5 (the default), PKCS#1 OAEP, ANSI X9.31, or no padding, respectively. For signatures, only B<-pkcs> and B<-raw> can be used. +Note: because of protection against Bleichenbacher attacks, decryption +using PKCS#1 v1.5 mode will not return errors in case padding check failed. +Use B<-raw> and inspect the returned value manually to check if the +padding is correct. + =item B<-hexdump> Hex dump the output data. |