On 11.03.21 11:41, Daniel Gustafsson wrote:
.. and apply the padding changes as proposed in a patch upthread like this (these work for all OpenSSL versions I've tested, and I'm rather more puzzled as to why we got away with not having them in the past):
Yes, before proceeding with this, we should probably understand why these changes are effective and why they haven't been required in the past.