-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers
Description
- Parameter Tampering:
- Depending on how the key parameter is handled in our application, an attacker might manipulate the key input to gain unauthorised access or information.
- Side-Channel Attacks:
- These involve gathering information from the physical implementation of the cipher, such as timing attacks, where an attacker could infer data based on the time it takes to perform encryption or decryption.
- Error Handling:
- If errors or panics are not handled properly in the larger application that uses this library, it might reveal information that can be exploited or used to crash the application.
- Code Injection:
- If user inputs are not validated and sanitized properly in the larger application, it might be possible to execute a code injection attack, though Rust's strong type system generally makes this difficult.
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers