N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-435g-fcv3-8j26

GHSA-435g-fcv3-8j26: Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`

In accordance with our security policy for libcrux, we publish a GitHub security advisory for any releases whose CHANGELOG includes bug-fixes, and encourage our users to upgrade. The latest releases of the libcrux-ecdh, libcrux-ed25519 and libcrux-psq crates contain the following bug-fixes:

`libcrux-ecdh`

#1301: Check length and clamping in X25519 secret validation. This is a breaking change since errors are now raised on unclamped X25519 secrets or inputs of the wrong length

`libcrux-ed25519`

#1320: Remove duplicated clamping step during key generation

The issue fixed in #1320 was first reported by Nadim Kobeissi.

`libcrux-psq`

#1319: Propagate AEADError instead of panicking
#1301: Fix broken clamping check for imported X25519 secret keys

The issue fixed in #1319 was first reported by Nadim Kobeissi.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-435g-fcv3-8j26

GHSA-435g-fcv3-8j26:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
libcrux-ecdh	rust	<= 0.0.5	0.0.6
libcrux-ed25519	rust	<= 0.0.5	0.0.6
libcrux-psq	rust	<= 0.0.6	0.0.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided commits reveals several vulnerabilities across the libcrux-ecdh, libcrux-psq, and libcrux-ed25519 crates. The root causes of these vulnerabilities are improper input validation and error handling.

Improper Input Validation:
- In libcrux-ecdh, the validate_scalar function failed to check for proper clamping of X25519 scalars, only checking for all-zero scalars. This allowed the use of weak keys.
- In libcrux-psq, the DHPrivateKey::from_bytes function contained a logically incorrect clamping check, permitting the import of invalid Diffie-Hellman private keys.
Error Handling and Panics:
- In libcrux-psq, the AEADKeyNonce::open function would panic upon a decryption failure due to an .unwrap() call. This could be exploited for a denial-of-service attack by providing a malformed ciphertext.
Cryptographic Bug Fix:
- In libcrux-ed25519, a duplicated key clamping step was removed from the generate_key_pair function. While presented as a bug fix, it highlights issues in the cryptographic implementation that are part of the overall security advisory.

The identified vulnerable functions are those that directly contained these flaws. During runtime, exploitation of these vulnerabilities would involve these functions processing malicious or malformed inputs, leading to the use of weak keys or service-terminating panics.

Vulnerable functions

libcrux_ecdh::ecdh::validate_scalar

libcrux-ecdh/src/ecdh.rs

The function `validate_scalar` in `libcrux-ecdh` did not properly validate X25519 scalars. It only checked if the scalar was all zeros, but did not check if it was properly clamped. This could allow the use of weak or invalid cryptographic keys.

libcrux_psq::handshake::dhkem::DHPrivateKey::from_bytes

libcrux-psq/src/handshake/dhkem.rs

The function `from_bytes` in `libcrux-psq` had a broken clamping check for imported X25519 secret keys. The check `value[31] & 64 != 1` was incorrect, allowing improperly clamped keys to be imported. The fix replaces this with a call to the corrected `libcrux_ecdh::validate_scalar` function.

libcrux_psq::aead::AEADKeyNonce::open

libcrux-psq/src/aead.rs

The `open` function in `libcrux-psq` would panic on an AEAD decryption error because it used `.unwrap()` on the result. This could be triggered by a malformed ciphertext, leading to a denial of service. The fix propagates the error instead of panicking.

libcrux_ed25519::impl_hacl::generate_key_pair

crates/algorithms/ed25519/src/impl_hacl.rs

The function `generate_key_pair` in `libcrux-ed25519` had a duplicated clamping step that was removed. While the removal itself is a bug fix for redundancy, the advisory points to this change, indicating that the logic around key generation and clamping was flawed.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-435g-fcv3-8j26: Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`

libcrux-ecdh

libcrux-ed25519

libcrux-psq

GHSA-435g-fcv3-8j26:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

GHSA-435g-fcv3-8j26: Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`

libcrux-ecdh

libcrux-ed25519

libcrux-psq

Basic Information

Basic Information

N/A

N/A

`libcrux-ecdh`

`libcrux-ed25519`

`libcrux-psq`

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

`libcrux-ecdh`

`libcrux-ed25519`

`libcrux-psq`