CVE-2019-16143

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in CryptoPP::HashTransformation::ThrowIfInvalidTruncatedSize

Detailed Report: https://oss-fuzz.com/testcase?key=5176499355385856 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2019-16143

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes...

CVE-2019-16143: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes...

PT-2019-14539

Name of the Vulnerable Software and Affected Versions blake2 crate versions prior to 0.8.1 Description An issue was discovered in the blake2 crate when used with HMAC, where the BLAKE2b and BLAKE2s algorithms produce incorrect results due to incorrect block sizes. Specifically, the block sizes us...