Lucene search
+L

3 matches found

RustSec
RustSec
•added 2019/08/25 12:00 p.m.•39 views

HMAC-BLAKE2 algorithms compute incorrect results

When used in conjunction with the Hash-based Message Authentication Code HMAC, the BLAKE2b and BLAKE2s implementations in blake2 crate versions prior to v0.8.1 used an incorrect block size 32-bytes instead of 64-bytes for BLAKE2s, and 64-bytes instead of 128-bytes for BLAKE2b, causing them to...

9.8CVSS2.9AI score0.00933EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2019/08/25 12:00 p.m.•46 views

RUSTSEC-2019-0019 HMAC-BLAKE2 algorithms compute incorrect results

When used in conjunction with the Hash-based Message Authentication Code HMAC, the BLAKE2b and BLAKE2s implementations in blake2 crate versions prior to v0.8.1 used an incorrect block size 32-bytes instead of 64-bytes for BLAKE2s, and 64-bytes instead of 128-bytes for BLAKE2b, causing them to...

9.8CVSS9.6AI score0.00933EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/08/25 12:00 a.m.•3 views

PT-2019-14539

Name of the Vulnerable Software and Affected Versions blake2 crate versions prior to 0.8.1 Description An issue was discovered in the blake2 crate when used with HMAC, where the BLAKE2b and BLAKE2s algorithms produce incorrect results due to incorrect block sizes. Specifically, the block sizes us...

9.8CVSS0.00933EPSS
SaveExploits0References8
Rows per page
Query Builder