Timing Attack

Overview web-token/jwt-framework is a JSON Object Signing and Encryption library for PHP and Symfony Bundle. Affected versions of this package are vulnerable to Timing Attack via RSAES-PKCS1-v15 decryption in RSACrypt::decryptWithRSA15. An attacker can recover encrypted content-encryption keys by...