Lucene search

K
rustsecRustsecRUSTSEC-2020-0089
HistoryDec 09, 2020 - 12:00 p.m.

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

2020-12-0912:00:00
rustsec.org
9
nanorand
rngs
failed
generate
non-64-bit
numbers
randomgen
implementations
unsigned integers
bit-shifting
truncate
as conversion
chacha
cryptographically secure
software

EPSS

0.002

Percentile

60.7%

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could
fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just
an as conversion.

This often manifested as RNGs returning nothing but 0, including the cryptographically secure ChaCha random
number generator…

EPSS

0.002

Percentile

60.7%

Related for RUSTSEC-2020-0089