PSF-2022-11 Buffer overflow in the _sha3 module in Python 3.10 and older

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

CVE-2022-37454

CVE-2022-37454 affects the Keccak XKCP SHA-3 reference implementation prior to fdc6fef, where an integer overflow leads to a buffer overflow in the sponge function interface. This can enable attackers to execute arbitrary code or compromise cryptographic properties. Public advisories note this vu...

XKCP 输入验证错误漏洞

XKCP is an extended Keccak code package for XKCP open source. XKCP SHA-3 has a security vulnerability that stems from the fact that an attacker can achieve integer overflow through its sponge function interface leading to the execution of arbitrary code or eliminate the expected cryptographic...

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

PT-2022-5188

Name of the Vulnerable Software and Affected Versions Keccak XKCP SHA-3 reference implementation versions before fdc6fef Description The issue is related to an integer overflow and resultant buffer overflow in the sponge function interface of the Keccak XKCP SHA-3 reference implementation. This...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0334-1 Rating: moderate References: 1178741 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues...

openSUSE Security Update : tor (openSUSE-2021-316)

This update for tor fixes the following issues : tor was updated to 0.4.5.6 : - https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html - Introduce a new MetricsPort HTTP interface - Support IPv6 in the torrc Address option - Add event-tracing library support for USDT and...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0316-1 Rating: moderate References: 1178741 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues:tor was...

XposedOrNot - Tool To Search An Aggregated Repository Of Xposed Passwords Comprising Of ~850 Million Real Time Passwords

XposedOrNot XoN tool is to search an aggregated repository of xposed passwords comprising of 850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security. What is Xposed Passwords? The main aim of this project is to give a free platform for th...

NIST Seeking Public Comment on SHA-3 Crypto Algorithm

The National Institute of Standards and Technology NIST is inviting the public to analyze and comment on its Secure Hash Algorithm-3 SHA-3, the latest iteration of cryptographic hash functions endorsed and published by the U.S. standards agency in order to protect the integrity of electronic...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

SHA-1 Hash Collision Could Be Within Reach of Attackers By 2018

It’s been just a few days since NIST approved Keccak as the winner of the SHA-3 competition, and it likely will be some time before we begin seeing the new hash algorithm popping up in common products and services. However, some in the cryptography community say it may not be a bad idea to start...

SHA-3 Winner Chosen, But It May Be Years Before Keccak Has an Effect

Now that NIST has selected Keccak as the winner of the five-year-long SHA-3 competition, the next question to be answered is whether the new hash algorithm will be implemented in any meaningful way in the near future. The answer, for right now at least, appears to be probably not. The SHA-3...

NIST Announces SHA-3 Hash Function Finalists

The National Institute of Standards and Technology has chosen the five finalists for the last round of its competition to find the next hash function standard. The SHA-3 finalists include Skein, developed by a group including Bruce Schneier and Jon Callas. The other four SHA-3 finalists are BLAKE...