7 matches found
libcrux incorrectly calculates on aarch64
On platforms without the core::arch::aarch64::vxarqu64 intrinsic, an unverified fallback in libcrux-intrinsics v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused libcrux-ml-kem and libcrux-ml-dsa to sample incorrectly, yielding incorrect shared...
libcrux-ml-dsa (0.0.3), libcrux-sha3 (>=0.0.3-alpha.2, <=0.0.3) potentially affected by unknown CVE via libcrux-intrinsics (0.0.3)
libcrux-intrinsics CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-intrinsics and may be impacted: - libcrux-ml-dsa 0.0.3 - libcrux-sha3 =0.0.3-alpha.2, =0.0.3 Source cves: unknown CVE Source advisory: GHSA-2CGV-28VR-RV6J...
GHSA-2CGV-28VR-RV6J libcrux incorrectly calculates on aarch64
On platforms without the core::arch::aarch64::vxarqu64 intrinsic, an unverified fallback in libcrux-intrinsics v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused libcrux-ml-kem and libcrux-ml-dsa to sample incorrectly, yielding incorrect shared...
libcrux-aesgcm (0.0.4-pre.1), libcrux-ml-dsa (0.0.3) +1 more potentially affected by unknown CVE via libcrux-intrinsics (>=0.0.3, <=0.0.4-pre.1)
libcrux-intrinsics CARGO version =0.0.3, =0.0.3-alpha.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-2CGV-28VR-RV6J...
Incorrect calculation on aarch64
On platforms without the core::arch::aarch64::vxarqu64 intrinsic, an unverified fallback in libcrux-intrinsics v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused libcrux-ml-kem and libcrux-ml-dsa to sample incorrectly, yielding incorrect shared...
RUSTSEC-2025-0133 Incorrect calculation on aarch64
On platforms without the core::arch::aarch64::vxarqu64 intrinsic, an unverified fallback in libcrux-intrinsics v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused libcrux-ml-kem and libcrux-ml-dsa to sample incorrectly, yielding incorrect shared...
libcrux-aesgcm (0.0.4-pre.1) potentially affected by unknown CVE via libcrux-intrinsics (0.0.4-pre.1)
libcrux-intrinsics CARGO version 0.0.4-pre.1 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-intrinsics and may be impacted: - libcrux-aesgcm 0.0.4-pre.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0133...