SHA-3 Keccak implementation

18 views

Skip to first unread message

pankul garg

unread,

Mar 9, 2023, 2:05:24 PM3/9/23

to Crypto++ Users

Hey everyone,

New subscriber and reaching out to ask about a paper about vulnerable implementation of SHA-3, https://ia.cr/2023/331.

Is crypto++'s implementation vulnerable to this?

Thanks

Pankul Garg

Jeffrey Walton

unread,

Mar 9, 2023, 3:43:02 PM3/9/23

to cryptop...@googlegroups.com

On Thu, Mar 9, 2023 at 2:05 PM pankul garg <pankul...@gmail.com> wrote:
>
> New subscriber and reaching out to ask about a paper about vulnerable implementation of SHA-3, https://ia.cr/2023/331.
>
> Is crypto++'s implementation vulnerable to this?

Probably not. Crypto++ uses C++, not C. It is a little easier to
control wild writes in C++.

Here is where the bounds are checked for SHA-3:
https://github.com/weidai11/cryptopp/blob/master/sha3.cpp#L59

Jeff