From c2df6cccbd6b3141db5f628859d9f6fbfd9ef286 Mon Sep 17 00:00:00 2001 From: Brad Fitzpatrick Date: Tue, 29 Nov 2016 20:41:29 +0000 Subject: [PATCH] crypto/tls: update CBC Lucky13 warning a bit Some countermeasures were implemented in https://golang.org/cl/18130 Updates #13385 Change-Id: I723e1e3be0fa6d13767b65b145d90c89e92b2774 Reviewed-on: https://go-review.googlesource.com/33665 Reviewed-by: Adam Langley --- tls.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tls.go b/tls.go index fc86428..f2e5aea 100644 --- a/tls.go +++ b/tls.go @@ -5,7 +5,7 @@ // Package tls partially implements TLS 1.2, as specified in RFC 5246. package tls -// BUG(agl): The crypto/tls package does not implement countermeasures +// BUG(agl): The crypto/tls package only implements some countermeasures // against Lucky13 attacks on CBC-mode encryption. See // http://www.isg.rhul.ac.uk/tls/TLStiming.pdf and // https://www.imperialviolet.org/2013/02/04/luckythirteen.html.