From 32f04ccb913a99923fb69df48bb734f1dd25c61b Mon Sep 17 00:00:00 2001 From: Scott Miller Date: Thu, 14 May 2020 12:29:21 -0500 Subject: [PATCH] Soften the warning language on PKCS #1 v1.5 padding (#8988) * Soften the warning language on PKCS #1 v1.5 padding --- website/pages/docs/configuration/seal/pkcs11.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/pages/docs/configuration/seal/pkcs11.mdx b/website/pages/docs/configuration/seal/pkcs11.mdx index 80f19d3fe2a83..d16032a13f2b9 100644 --- a/website/pages/docs/configuration/seal/pkcs11.mdx +++ b/website/pages/docs/configuration/seal/pkcs11.mdx @@ -113,7 +113,7 @@ These parameters apply to the `seal` stanza in the Vault configuration file: - `0x0001` `CKM_RSA_PKCS` ~> **Warning**: CKM_RSA_PKCS specifies the PKCS #1 v1.5 padding scheme, which is - subject to several padding oracle attacks. Use of CKM_RSA_PKCS_OAEP is + in considered less secure than OAEP. Where possible, use of CKM_RSA_PKCS_OAEP is recommended over CKM_RSA_PKCS.