File tree Expand file tree Collapse file tree 1 file changed +23
-0
lines changed
crates/libcrux-intrinsics Expand file tree Collapse file tree 1 file changed +23
-0
lines changed Original file line number Diff line number Diff line change 1+ ``` toml
2+ [advisory ]
3+ id = " RUSTSEC-0000-0000"
4+ package = " libcrux-intrinsics"
5+ date = " 2025-12-04"
6+ url = " https://github.com/cryspen/libcrux/issues/1220"
7+ categories = [" crypto-failure" ]
8+
9+ [versions ]
10+ patched = [" >= 0.0.4" ]
11+ unaffected = [" <= 0.0.3" ]
12+
13+ [affected ]
14+ arch = [" aarch64" ]
15+ ```
16+
17+ # Incorrect calculation on aarch64
18+
19+ On platforms without the ` core::arch::aarch64::vxarq_u64 ` intrinsic, an unverified fallback in ` libcrux-intrinsics ` v0.0.3
20+ passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused ` libcrux-ml-kem ` and
21+ ` libcrux-ml-dsa ` to sample incorrectly, yielding incorrect shared secrets and invalid signatures.
22+
23+ The issue has been fixed in v0.0.4.
You can’t perform that action at this time.
0 commit comments