note 125287 deleted from function.openssl-decrypt by cmb
| From: | cmb@php.net | Date: | Thu, 20 Aug 2020 09:41:50 +0000 |
| Subject: | note 125287 deleted from function.openssl-decrypt by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-215004@lists.php.net to get a copy of this message | ||
Note Submitter: t.terada
----
This function does not check tag length in GCM mode, which may allow attackers to bypass integrity
check by tag truncation.
See https://bugs.php.net/bug.php?id=75804