PADDING ORACLE

Feature Value
Type Protection
Risk Other
Covered by Agent

In cryptography, a padding oracle attack is an attack which uses the padding validation of a cryptographic message to decrypt the ciphertext. In cryptography, variable-length plaintext messages often have to be padded (expanded) to be compatible with the underlying cryptographic primitive. The attack relies on having a "padding oracle" which freely responds to queries about whether a message is correctly padded or not.
Hdiv Agent protects against the exploitation of the attack by detecting attack patterns.

More information