Ernesto Campohermoso

www.cirrus-it.net [email protected]

Cirrus IT S.R.L. La Paz

Results 2 comments of


                                            Ernesto Campohermoso

High attention point related to "Padding Oracle", reported by MobSF, when using encryption mode, "AES/CBC/PKCS7Padding", in class "StorageCipher18Implementation.java".

Possible duplicate of #526?

PKCS5 and PKCS7 are known to be vulnerable to oracle padding attacks

Possible duplicate of #526?