Warn in the documentation against the use of CKM_RSA_PKCS. (#8982)

* Warn in the documentation against the use of CKM_RSA_PKCS * tweak * Roger roger.
hashicorp · May 12, 2020 · 7715c23 · 7715c23
1 parent 29c3c88
commit 7715c23
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/website/pages/docs/configuration/seal/pkcs11.mdx b/website/pages/docs/configuration/seal/pkcs11.mdx
@@ -112,6 +112,11 @@ These parameters apply to the `seal` stanza in the Vault configuration file:
   - `0x0009` `CKM_RSA_PKCS_OAEP`
   - `0x0001` `CKM_RSA_PKCS`
 
+  ~> **Warning**: CKM_RSA_PKCS specifies the PKCS #1 v1.5 padding scheme, which is
+  subject to several padding oracle attacks.  Use of CKM_RSA_PKCS_OAEP is
+  recommended over CKM_RSA_PKCS.
+
+
 - `hmac_mechanism` `(string: "0x0251")`: The encryption/decryption mechanism to
   use, specified as a decimal or hexadecimal (prefixed by `0x`) string.
   Currently only `0x0251` (corresponding to `CKM_SHA256_HMAC` from the