3 matches found
cisco7crack
cisco7crack 시스코 enable 7 비밀번호를 암호화 및 복호화합니다...
GHSA-8JQH-95G6-7JPJ Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)
Summary Phalcon\Encryption\Crypt provides authenticated encryption: when useSigning is enabled the default, encrypt appends an HMAC tag and decrypt verifies it before returning the plaintext. The verification compares the attacker-supplied tag against the freshly computed HMAC using PHP/Zephir...
CVE-2026-54736: Observable Timing Discrepancy
Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the attacker-supplied HMAC tag against the freshly computed HMAC using PHP/Zephir identity comparison, which lowers to a byte-wise comparison that returns early on the first...