Vulnerability in the library implementing the SHA-3 algorithm
A vulnerability (CVE-2022-37454) has been identified in the implementation of the SHA-3 (Keccak) cryptographic hash function, proposed in the XKCP (eXtended Keccak Code Package), which could lead to a buffer overflow when processing specifically formatted data. The issue arises from an error in the specific implementation of SHA-3, rather than a flaw in the algorithm itself. The XKCP package is presented as the official implementation of SHA-3, developed with the participation of the developer team […]
