+> Microsoft believes that it's no longer safe to decrypt data encrypted with the Cipher-Block-Chaining (CBC) mode of symmetric encryption (which is the default value of the <xref:System.Security.Cryptography.AesManaged.Mode> property) when verifiable padding has been applied without first ensuring the integrity of the ciphertext, except for very specific circumstances. For more information, see [Timing vulnerabilities with CBC-mode symmetric decryption using padding](~/docs/standard/security/vulnerabilities-cbc-mode.md).
0 commit comments