~ / search / GHSA-4x25-pvhw-5224

GHSA-4x25-pvhw-5224

Algorithms compute incorrect results in blake2

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-16143

Packages

EcosystemPackageAffectedFixed in
crates.io blake2 < 0.8.1 0.8.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes.

References

External links from the advisory. They lead to third-party sites.