Home > Vulnerability Database > WS-2019-0299

WhiteSource Vulnerability Database

WS-2019-0299

Good to know:

Date: October 23, 2019

chacha20' before v0.2.3 allow generation of keystreams that are larger than ChaCha20's max blocks (~256GB of blocks ). This duplicates the keystream with failure modes similar to nonce reuse.

Language: C++

Severity Score

0.0

Related Resources (3)

Url: https://rustsec.org/advisories/RUSTSEC-2019-0029.html

Url: https://github.com/RustCrypto/stream-ciphers/commit/20d0a203476a01be91aeff6c4519dec25e52e6d5

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0299

Weakness Type (CWE)

Generation of Weak Initialization Vector (IV)

CWE-1204

Top Fix

Upgrade Version

Upgrade to version chacha20-v0.2.3

Learn More