crates.io/p3-symmetric: low
Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is not collision resistant for inputs of different lengths
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3g92-f9ch-qjcm
- https://github.com/Plonky3/Plonky3/security/advisories/GHSA-3g92-f9ch-qjcm
- https://github.com/Plonky3/Plonky3/commit/5c1dc1d64c0516a8911bbf3ea40f173c21d6ae47
- https://github.com/Plonky3/Plonky3
published · modified · JSON