/** * Copyright (c) 2025 Ofri Peretz * Licensed under the MIT License. Use of this source code is governed by the * MIT license that can be found in the LICENSE file. */ /** * ESLint Rule: no-insecure-rsa-padding * Detects RSA with PKCS#1 v1.5 padding (Marvin Attack vulnerable) * CVE-2023-46809: Timing side-channel in Node.js privateDecrypt() * * @see https://nvd.nist.gov/vuln/detail/CVE-2023-46809 * @see https://people.redhat.com/~hkario/marvin/ */ import type { TSESLint } from '@interlace/eslint-devkit'; type MessageIds = 'insecureRsaPadding' | 'useOaep'; export interface Options { /** Allow in test files. Default: false */ allowInTests?: boolean; } type RuleOptions = [Options?]; export declare const noInsecureRsaPadding: TSESLint.RuleModule & { name: string; }; export type { Options as NoInsecureRsaPaddingOptions };