Skip to content
OpenAdvisories

Package · Go

github.com/agnivade/easy-scrypt

1 known vulnerabilities.

1 result · Feed

  • Low 2.6

    agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancy

    A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The …