Re: Re: SonarLint complaining about "Use a stronger padding scheme"
Jeffrey Walton <[email protected]> Tue, 16 Apr 2024 15:19:32 -0400
| Newsgroups | gmane.comp.encryption.cryptopp |
|---|---|
| Message-ID | <CAH8yC8=wptAsfC1eM0Up37oZt14dok_C3R=qLiwSrbUJHiVNSw@mail.gmail.com> |
--000000000000d62f1f06163b9e70 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Apr 16, 2024 at 1:44=E2=80=AFPM One Sini <[email protected]> wrote: > I wasn't entirely satisfied with the security, so I've adjusted the code. > I'm not sure if that helps you, depending on what you're doing with it. > > This code uses RSA with OAEP (Optimal Asymmetric Encryption Padding) to > avoid security issues like padding oracle attacks. It generates RSA keys > with a length of 2048 bits, encrypts the message with OAEP padding, and > then decrypts it. > > Best Regards Satoshi > I deleted the message from the group. The *.pdf and *.pages smells of malware. If you want to provide code, please inline it or provide it as a text attachment. Jeff > --=20 You received this message because you are subscribed to the Google Groups "= Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/= cryptopp-users/CAH8yC8%3DwptAsfC1eM0Up37oZt14dok_C3R%3DqLiwSrbUJHiVNSw%40ma= il.gmail.com. --000000000000d62f1f06163b9e70 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">= <div dir=3D"ltr" class=3D"gmail_attr">On Tue, Apr 16, 2024 at 1:44=E2=80=AF= PM One Sini <<a href=3D"mailto:[email protected]">[email protected]</a>&= gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0= px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div = dir=3D"auto"><div><span style=3D"font-family:s=C3=B6hne,ui-sans-serif,syste= m-ui,-apple-system,"segoe ui",roboto,ubuntu,cantarell,"noto = sans",sans-serif,"helvetica neue",arial,"apple color em= oji","segoe ui emoji","segoe ui symbol","noto= color emoji";font-size:16px;font-style:normal;font-weight:400;letter-= spacing:normal;text-indent:0px;text-transform:none;white-space:pre-wrap;wor= d-spacing:0px;text-decoration:none;float:none;display:inline;color:rgb(13,1= 3,13)">I wasn't entirely satisfied with the security, so I've adjus= ted the code. I'm not sure if that helps you, depending on what you'= ;re doing with it.</span></div><br></div><div dir=3D"auto"><div><span style= =3D"font-family:s=C3=B6hne,ui-sans-serif,system-ui,-apple-system,"sego= e ui",roboto,ubuntu,cantarell,"noto sans",sans-serif,"h= elvetica neue",arial,"apple color emoji","segoe ui emoj= i","segoe ui symbol","noto color emoji";font-size:= 16px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0p= x;text-transform:none;white-space:pre-wrap;word-spacing:0px;text-decoration= :none;float:none;display:inline;color:rgb(13,13,13)">This code uses RSA wit= h OAEP (Optimal Asymmetric Encryption Padding) to avoid security issues lik= e padding oracle attacks. It generates RSA keys with a length of 2048 bits,= encrypts the message with OAEP padding, and then decrypts it.</span></div>= <div dir=3D"auto"><span style=3D"font-family:s=C3=B6hne,ui-sans-serif,syste= m-ui,-apple-system,"segoe ui",roboto,ubuntu,cantarell,"noto = sans",sans-serif,"helvetica neue",arial,"apple color em= oji","segoe ui emoji","segoe ui symbol","noto= color emoji";font-size:16px;font-style:normal;font-weight:400;letter-= spacing:normal;text-indent:0px;text-transform:none;white-space:pre-wrap;wor= d-spacing:0px;text-decoration:none;float:none;display:inline;color:rgb(13,1= 3,13)"><br></span></div><div dir=3D"auto"><span style=3D"font-family:s=C3= =B6hne,ui-sans-serif,system-ui,-apple-system,"segoe ui",roboto,ub= untu,cantarell,"noto sans",sans-serif,"helvetica neue",= arial,"apple color emoji","segoe ui emoji","segoe = ui symbol","noto color emoji";font-size:16px;font-style:norm= al;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:non= e;white-space:pre-wrap;word-spacing:0px;text-decoration:none;float:none;dis= play:inline;color:rgb(13,13,13)">Best Regards Satoshi </span></div></div></= blockquote><div><br></div><div>I deleted the message from the group. The *.= pdf and *.pages smells of malware.</div><div><br></div><div>If you want to = provide code, please inline it or provide it as a text attachment.<br></div= ><div><br></div><div>Jeff</div><blockquote class=3D"gmail_quote" style=3D"m= argin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left= :1ex"><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" sty= le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi= ng-left:1ex"> </blockquote></div></div></blockquote></div></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;Crypto++ Users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">cryp= [email protected]</a>.<br /> To view this discussion on the web visit <a href=3D"https://groups.google.c= om/d/msgid/cryptopp-users/CAH8yC8%3DwptAsfC1eM0Up37oZt14dok_C3R%3DqLiwSrbUJ= HiVNSw%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gro= ups.google.com/d/msgid/cryptopp-users/CAH8yC8%3DwptAsfC1eM0Up37oZt14dok_C3R= %3DqLiwSrbUJHiVNSw%40mail.gmail.com</a>.<br /> --000000000000d62f1f06163b9e70--