padding-oracle-anti-pattern

What problem does it solve?

This Skill helps prevent attackers from decrypting sensitive data by exploiting how an application handles decryption padding errors, a vulnerability known as a padding oracle attack.

Core Features & Use Cases

• Vulnerability Detection: Identifies code that might leak information through distinct error messages or timing differences during decryption.
• Secure Implementation Guidance: Provides examples of using Authenticated Encryption with Associated Data (AEAD) modes like AES-GCM or the Encrypt-then-MAC approach for CBC mode.
• Use Case: When reviewing code that handles encrypted user data, this skill helps ensure that decryption failures do not reveal information that an attacker could use to decrypt other messages.

Quick Start

Review the attached Python code for potential padding oracle vulnerabilities in its decryption logic.