this is an issue with the SSL v3.0 non deterministic padding used in CBC. Is AES in CBC mode itself is un-secure or it is an issue only when used in SSLv3.0/TLS ? Can you please clarify ?
I use openssl (an old version before the poodle attack fix) aes-128-cbc mode to encrypt a file like below, openssl enc -aes-128-cbc -in test -out test.enc -K $key128 -iv $iv
Is test.enc secure as far as the poodle attack/padding oracle attack is concerned ? If not secure, how can I make it secure ? will patching openssl to the new version take care ?