Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

A hole in crypt_blowfish

Posted Jun 22, 2011 21:07 UTC (Wed) by jonabbey (subscriber, #2736)
Parent article: A hole in crypt_blowfish

It appears that a very similar bug was discovered in mindrot.org's Java implementation of the BCrypt hash algorithm early last year..

http://www.mindrot.org/files/jBCrypt/internat.adv

(Log in to post comments)

Posted Jun 22, 2011 21:17 UTC (Wed) by jonabbey (subscriber, #2736) [Link]

Er, scratch that. In the Java lib case, it had to do with their not specifying the use of the UTF-8 charset when doing encoding. Not the same sign extension bug at all, though it also affected international characters.