Skip to content
OpenAdvisories

Package · crates.io

libcrux-sha3

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High —

    libcrux-sha3: Incorrect output from SHAKE squeeze functions

    The incremental squeeze functions in the portable SHAKE XOF API, when attempting to squeeze more than `RATE` (168 for SHAKE128, 136 for SHAKE256) bytes, performed an additional permutation of the state before producing the first output block, thus discarding …