arodland/Crypt-PBKDF2

arodland/Crypt-PBKDF2

GitHubGitHub
GitHubgithub.com
search.cpan.orgsearch.cpan.org
Releases15
Frequency1 year 1 month
Last Release
Stars6
The PBKDF2 password hash algorithm for Perl
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2017-20240↗
5.9 MEDIUM—

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key.