strongbox
strongbox copied to clipboard
Default PKCS#1 v1.5 padding leaks information
PKCS#1 v1.5 is vulnerable to adaptive chosen ciphertext attacks. The default padding should likely be changed to OAEP. "No padding" should not be an option.