diff --git a/website/pages/docs/configuration/seal/pkcs11.mdx b/website/pages/docs/configuration/seal/pkcs11.mdx index 80f19d3fe2a83..d16032a13f2b9 100644 --- a/website/pages/docs/configuration/seal/pkcs11.mdx +++ b/website/pages/docs/configuration/seal/pkcs11.mdx @@ -113,7 +113,7 @@ These parameters apply to the `seal` stanza in the Vault configuration file: - `0x0001` `CKM_RSA_PKCS` ~> **Warning**: CKM_RSA_PKCS specifies the PKCS #1 v1.5 padding scheme, which is - subject to several padding oracle attacks. Use of CKM_RSA_PKCS_OAEP is + in considered less secure than OAEP. Where possible, use of CKM_RSA_PKCS_OAEP is recommended over CKM_RSA_PKCS.