PT-2021-28380 · Miscreant+2 · Miscreant+2

Published 2021-02-28 · Updated 2021-02-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Miscreant (affected versions not specified)

Description: The Miscreant project has been abandoned and archived. Users are recommended to migrate to the aes-siv crate, which implements both the AES-CMAC-SIV and AES-PMAC-SIV constructions. Alternatively, the aes-gcm-siv crate is available for a newer, faster construction with similar properties.

Recommendations: Migrate to the aes-siv crate. Alternatively, consider using the aes-gcm-siv crate for a newer, faster construction.

Related Identifiers

RUSTSEC-2021-0062

Affected Products

Miscreant

Aes-Gcm-Siv

Aes-Siv

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2021-0062 · Vendor Advisory
• https://github.com/miscreant/miscreant.rs/commit/5d921f579e0c2b9960d472cf377b8487d97fbcec · Note
• https://crates.io/crates/miscreant · Note
• https://rustsec.org/advisories/RUSTSEC-2021-0062.html · Note