doc,crypto: add changelog and note about disabled RSA_PKCS1_PADDING

PR-URL: #51782 Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Marco Ippolito <[email protected]>
nodejs · Feb 28, 2024 · 31c4ba4 · 31c4ba4
1 parent 4036ffd
commit 31c4ba4
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/doc/api/crypto.md b/doc/api/crypto.md
@@ -4508,6 +4508,12 @@ An array of supported digest functions can be retrieved using
 <!-- YAML
 added: v0.11.14
 changes:
+  - version:
+      - v21.6.2
+      - v20.11.1
+      - v18.19.1
+    pr-url: https://github.com/nodejs-private/node-private/pull/525
+    description: The `RSA_PKCS1_PADDING` padding was disabled.
   - version: v15.0.0
     pr-url: https://github.com/nodejs/node/pull/35093
     description: Added string, ArrayBuffer, and CryptoKey as allowable key
@@ -4549,6 +4555,9 @@ If `privateKey` is not a [`KeyObject`][], this function behaves as if
 object, the `padding` property can be passed. Otherwise, this function uses
 `RSA_PKCS1_OAEP_PADDING`.
 
+The `crypto.constants.RSA_PKCS1_PADDING` padding is disabled in
+[`crypto.privateDecrypt()`][] since the February 2024 security releases. <span class="deprecated-inline"></span>
+
 ### `crypto.privateEncrypt(privateKey, buffer)`
 
 <!-- YAML