GitHub Advisoryadvisory · crates.io

GHSA-4x25-pvhw-5224 Algorithms compute incorrect results in blake2

CRITICAL Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2019-16143
Ecosystem
crates.io
Packages
blake2
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-327
Reviewed
2021-08-19

Affected packages

• crates.io blake2: < 0.8.1 → fixed in 0.8.1

Description

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes.

Related

Alias · CVE (1)

  • CVE-2019-16143 An issue was discovered in the blake2 crate before 0.8.1 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References