NVD CVE-2016-9243 March 27, 2017 007admin Leave a comment HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.