I'm currently looking at changing the padding type from one of the Oracle Padding attacks to a secure one. Would this break data already encrypted using the old method?

  • $\begingroup$ Mainly out of curiosity, which padding mode would you be changing from and to which mode? $\endgroup$ – otus Mar 23 '16 at 7:53
  • $\begingroup$ Presumably PKCS#1v1.5 to OAEP. $\endgroup$ – CodesInChaos Mar 23 '16 at 7:53
  • $\begingroup$ To make matters worse, if you still support the old vulnerable algorithm, you'd probably still be vulnerable to padding oracles, even for data that was encrypted using the new algorithm as long as you use the same RSA key for both. $\endgroup$ – CodesInChaos Mar 23 '16 at 7:54
  • $\begingroup$ @CodesInChaos you would be correct. And thanks for the awesome answer you had. $\endgroup$ – Matt Mar 28 '16 at 0:01

Yes, every RSA padding I'm familiar with is incompatible with the other schemes.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.