Skip to main content
VulnerabilityPublished

Orion: BLAKE2b produces wrong tag when using `reset()` with a different-length key

Affects orionSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Patch
Available – fixed in 0.18.1, 0.17.16

Data as of 30 Oct 2026, 12:22 UTC

What to do

Upgrade orion to 0.18.1 or 0.17.16.

Affected software

ProductAffectedFixed in
crates.ioorionpkg:cargo/orionOther threatsAffected
  • >=0.0.0-0 <0.17.16
  • >=0.18.0-0 <0.18.1
Fixed in
  • 0.17.16
  • 0.18.1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Upgrade the Orion library to version 0.17.16 or 0.18.1, where this issue is fixed. No other mitigation is necessary as the fix addresses the root cause.

Description

The Orion library's BLAKE2b implementation has a flaw in the reset() function when used with a key of different length than the original initialization key. This causes the computed BLAKE2b tag to be incorrect, leading to verification failures during normal protocol operations. The issue is fixed in versions 0.17.16 and 0.18.1.

References

Community reviews

Loading reviews…