Katu128 Fixed «100% SECURE»

Hey everyone 👋

Just pushed a small but important fix: katu128 is now fixed 🎉

If you ran into any weirdness around katu128 before, this should sort it out.

Let me know if you still see issues. Thanks for your patience 🙏 katu128 fixed

Update when you can.



Original (faulty):

key: 000102030405060708090a0b0c0d0e0f
iv:  010000000000000000000000
plaintext: 00000000000000000000000000000000
ciphertext: 58e2fccefa7e3061367f1d57
tag: ab72e98c

KATU128 Fixed (corrected):

key:   000102030405060708090a0b0c0d0e0f
iv:    000000000000000000000001   (big-endian increment)
plaintext: 00000000000000000000000000000000
aad:      00000000000000000000000000000000  (explicit)
ciphertext: 0388dace60b6a392f328c2b971b2fe78
tag:       ab72e98c2f1b4e3a6d9c0b8a7e6d5c4f  (128 bits)

If you are still seeing katu128 errors, you likely have not yet updated to the fixed version. Follow this step-by-step guide to permanently resolve the issue.

More than a dozen hardware vendors used the katu128 framework. When one issued a patch, it would break another’s implementation. For nearly 18 months, the community was stuck in a "whack-a-mole" cycle of partial fixes. Hey everyone 👋 Just pushed a small but

  • Verify the fix: Open PowerShell and run:
    Get-WinEvent -LogName System | Where-Object $_.Message -like "*katu128*"
    A return of no results means success.
  • Katu128 Fixed «100% SECURE»