Skip to content

Commit 0be109e

Browse files
ctzdjc
authored andcommitted
Add libcrux-intrinsics bug
1 parent 684d335 commit 0be109e

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed
Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "libcrux-intrinsics"
5+
date = "2025-12-04"
6+
url = "https://github.com/cryspen/libcrux/issues/1220"
7+
categories = ["crypto-failure"]
8+
9+
[versions]
10+
patched = [">= 0.0.4"]
11+
unaffected = ["<= 0.0.3"]
12+
13+
[affected]
14+
arch = ["aarch64"]
15+
```
16+
17+
# Incorrect calculation on aarch64
18+
19+
On platforms without the `core::arch::aarch64::vxarq_u64` intrinsic, an unverified fallback in `libcrux-intrinsics` v0.0.3
20+
passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused `libcrux-ml-kem` and
21+
`libcrux-ml-dsa` to sample incorrectly, yielding incorrect shared secrets and invalid signatures.
22+
23+
The issue has been fixed in v0.0.4.

0 commit comments

Comments
 (0)