awesome-python-login-model icon indicating copy to clipboard operation
awesome-python-login-model copied to clipboard

Published 20 hours ago • verified publisher icon Kr1s77

[Security] Using PKCS1_v1_5 is dangeorus.

Open spblue4422 opened this issue 4 months ago • 1 comments

Hi, while I'm reviewing your code, I noticed that you're using algorithm PKCS1_v1_5 on encryption.

https://github.com/Kr1s77/awesome-python-login-model/blob/b458a09bf5542b52784bbba9861c4f3a82b2e45d/baidu/util.py#L11-L15

According to RFC 8017, PKCS_v1_5 is not recommended anymore, instead PKCS1_OAEP is recommended.

Update for this would be significantly helpful to security. We would appreciate it if you could review the code and proceed with the update if it is deemed insecure.

Thank you.

spblue4422 avatar May 30 '25 08:05 spblue4422