Keystream Cycling Issue in Go Cryptography Library Affecting Encryption and Random Number Generation

CVE-2019-11840

What is CVE-2019-11840?

A flaw in the amd64 implementation of the Go cryptography library's salsa20 and salsa packages can lead to significant security risks. When more than 256 GiB of keystream is produced or when the counter exceeds 32 bits, the library erroneously generates output, which can repeat previously produced keystream bytes. This predictability can severely undermine the confidentiality of encryption applications and compromise the randomness in Cryptographically Secure Pseudo-Random Number Generators (CSPRNG), making data vulnerable to unauthorized access.

References