Skip to content
OpenAdvisories

Vendor

constantoine

1 known vulnerabilities.

Products

totp-rs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2022-29185

    Observable Timing Discrepancy in totp-rs

    totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password (TOTP). Prior to version 1.1.0, token comparison was not constant time, and could theorically be used to guess value of an TOTP token, and thus…

    constantoine totp-rs totp-rs crates.io