CRITICAL9.8

GHSA-4x25-pvhw-5224

Algorithms compute incorrect results in blake2

Details

An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/blake2

Introduced in: 0Fixed in: 0.8.1

Upgrade blake2 to 0.8.1 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2019-16143[ADVISORY]
https://github.com/RustCrypto/MACs/issues/19[WEB]
https://github.com/RustCrypto/hashes/tree/master/blake2[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2019-0019.html[WEB]