doc,crypto: add changelog and note about disabled RSA_PKCS1_PADDING

panva · richardlau · commit c7baf7b274ed · 2024-02-28T17:48:51.000Z
PR-URL: #51782 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
diff --git a/doc/api/crypto.md b/doc/api/crypto.md
@@ -4510,6 +4510,12 @@ An array of supported digest functions can be retrieved using
 <!-- YAML
 added: v0.11.14
 changes:
+  - version:
+      - v21.6.2
+      - v20.11.1
+      - v18.19.1
+    pr-url: https://github.com/nodejs-private/node-private/pull/525
+    description: The `RSA_PKCS1_PADDING` padding was disabled.
   - version: v15.0.0
     pr-url: https://github.com/nodejs/node/pull/35093
     description: Added string, ArrayBuffer, and CryptoKey as allowable key
@@ -4551,6 +4557,9 @@ If `privateKey` is not a [`KeyObject`][], this function behaves as if
 object, the `padding` property can be passed. Otherwise, this function uses
 `RSA_PKCS1_OAEP_PADDING`.
 
+The `crypto.constants.RSA_PKCS1_PADDING` padding is disabled in
+[`crypto.privateDecrypt()`][] since the February 2024 security releases. <span class="deprecated-inline"></span>
+
 ### `crypto.privateEncrypt(privateKey, buffer)`
 
 <!-- YAML
