Skip to content
OpenAdvisories

Package · crates.io

libcrux-ed25519

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-76234

    libcrux before 0.0.6 Cryptographic Implementation Bug Fixes

    libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X2551…

    celabshq libcrux-ed25519 libcrux-ecdh libcrux-psq crates.io
  • High —
    GHSA-434v-x5qv-pmh6

    libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure

    The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continu…

    libcrux-ed25519 crates.io