advisory-db/crates/sodiumoxide/RUSTSEC-2019-0026.md

[advisory]
id = "RUSTSEC-2019-0026"
package = "sodiumoxide"
aliases = ["CVE-2019-25002"]
date = "2019-10-11"
keywords = ["cryptography"]
url = "https://github.com/sodiumoxide/sodiumoxide/pull/381"

[affected.functions]
"sodiumoxide::crypto::generichash::Digest::eq" = ["< 0.2.5, >= 0.2.0"]
"sodiumoxide::crypto::generichash::Digest::ne" = ["< 0.2.5, >= 0.2.0"]

[versions]
patched = [">= 0.2.5"]

generichash::Digest::eq always return true

PartialEq implementation for generichash::Digest has compared itself to itself.

Digest::eq always returns true and Digest::ne always returns false.