CVE-2016-9243 in cryptography
요약
\~에 의해 MITRE
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.