From 5e519a25f79d57971b065d487099876104de3e34 Mon Sep 17 00:00:00 2001 From: Michael Eischer Date: Mon, 24 Mar 2025 19:44:13 +0100 Subject: [PATCH] tweak changelog Co-authored-by: rawtaz --- changelog/unreleased/issue-5291 | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/changelog/unreleased/issue-5291 b/changelog/unreleased/issue-5291 index f433d3e63..bc5f5a0dd 100644 --- a/changelog/unreleased/issue-5291 +++ b/changelog/unreleased/issue-5291 @@ -15,9 +15,10 @@ opaque pack files and by default processes multiple files in parallel. This likely prevents an attacker from matching pack files to the attacker-known file and thereby prevents the attack. -We have added a mitigation to restic, which randomizes how chunks are assembled -into pack files. This prevents an attacker from guessing which chunks are part -of a pack file and thereby prevents learning the chunk sizes. +Despite the low chances of a practical attack, restic now has added mitigation +that randomizes how chunks are assembled into pack files. This prevents attackers +from guessing which chunks are part of a pack file and thereby prevents learning +the chunk sizes. https://github.com/restic/restic/issues/5291 https://github.com/restic/restic/pull/5295