diff --git a/crates/libcrux-ml-dsa/RUSTSEC-0000-0000.md b/crates/libcrux-ml-dsa/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..c352a66b3 --- /dev/null +++ b/crates/libcrux-ml-dsa/RUSTSEC-0000-0000.md @@ -0,0 +1,21 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "libcrux-ml-dsa" +date = "2025-11-29" +url = "https://github.com/cryspen/libcrux/issues/1220" +categories = ["crypto-failure"] + +[versions] +patched = [">= 0.0.4"] +unaffected = ["<= 0.0.3"] + +[affected] +arch = ["aarch64"] +``` + +# Incorrect calculation on aarch64 + +libcrux-ml-dsa 0.0.3 produces incorrect signatures on aarch64. +The exact cryptographic implications of the incorrect calculation +are unclear and have not been analyzed. diff --git a/crates/libcrux-ml-kem/RUSTSEC-0000-0000.md b/crates/libcrux-ml-kem/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..023376b2d --- /dev/null +++ b/crates/libcrux-ml-kem/RUSTSEC-0000-0000.md @@ -0,0 +1,21 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "libcrux-ml-kem" +date = "2025-11-29" +url = "https://github.com/cryspen/libcrux/issues/1220" +categories = ["crypto-failure"] + +[versions] +patched = [">= 0.0.4"] +unaffected = ["<= 0.0.3"] + +[affected] +arch = ["aarch64"] +``` + +# Incorrect calculation on aarch64 + +libcrux-ml-kem 0.0.3 produces incorrect shared secrets on aarch64. +The exact cryptographic implications of the incorrect calculation +are unclear and have not been analyzed.