3 results · Feed
-
Unscored —
BLAKE2b produces wrong tag when using `reset()` with a different-length key
## Summary `hazardous::mac::blake2b::Blake2b::reset()` does not correctly reset the state when a key is supplied that has a different length than the one used upon initialization with `hazardous::mac::blake2b::Blake2b::new()`, because it errorneously uses a c…
-
Unscored —
LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time
## Summary On targets that do not have a conditional move/select operations, LLVM compiles the internal `conditional_sub_u32()` function, into one that will contain a conditional jump on secret-dependent data, which could leak information about encapsulation …
-
High 7.5
Flaw in streaming state in orion
An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.