The Orion library's BLAKE2b implementation has a flaw in the reset() function when used with a key of different length than the original initialization key. This causes the computed BLAKE2b tag to be incorrect, leading to verification failures during normal protocol operations. The issue is fixed in versions 0.17.16 and 0.18.1.