libcrux-ed25519
Formally verified ed25519 signature library
Activity
- Latest release
- 3w ago
- Total releases
- 20
- Cadence
- ~16 days
- Last 12 months
- 14
Details
- License
- Apache-2.0
- First release
- Feb 24, 2025
| Version | Released | |
|---|---|---|
0.0.10
patch
|
0.0.10
patch
Dependencies (8)
Changelog
Compare changes
|
|
0.0.10-pre.1
pre
|
0.0.10-pre.1
pre
Dependencies (8)
Changelog
Compare changes
|
|
0.0.9
unknown
|
0.0.9
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.9-pre.1
unknown
|
0.0.9-pre.1
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.8
unknown
|
0.0.8
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.8-rc.1
unknown
|
0.0.8-rc.1
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.7
unknown
|
0.0.7
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.7-rc.1
unknown
1 CVE
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev |
0.0.7-rc.1
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.6
unknown
1 CVE
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev |
0.0.6
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.6-pre.1
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.6-pre.1
unknown
Dependencies (8)
Changelog
Compare changes
|
|
0.0.5
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.5
unknown
Dependencies (7)
Changelog
Compare changes
|
|
0.0.5-pre.1
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.5-pre.1
unknown
Dependencies (7)
Changelog
Compare changes
|
|
0.0.4
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.4
unknown
Dependencies (7)
Changelog
Compare changes
|
|
0.0.4-pre.1
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.4-pre.1
unknown
Dependencies (7)
Changelog
Compare changes
|
|
0.0.3
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
| ||
0.0.3-alpha.3
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.3-alpha.3
unknown
Dependencies (6)
Changelog
Compare changes
|
|
0.0.3-alpha.2
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.3-alpha.2
unknown
Dependencies (6)
Changelog
Compare changes
|
|
0.0.3-alpha.1
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|
0.0.3-alpha.1
unknown
Dependencies (6)
Changelog
Compare changes
|
|
0.0.2
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
| ||
0.0.2-beta.3
unknown
2 CVEs
GHSA-434v-x5qv-pmh6
RUSTSEC-2026-0075
Mar 26, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
High
Network
Low
None
None
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secret key. ImpactThis bug only occurs in the event of a catastrophic failure of the CSPRNG, but would allow anyone to forge signatures under the resulting static signing key. MitigationInstead of silently continuing with an all-zero signing key, starting from version Fixed in
0.0.7
References Updated Mar 27, 2026 · Source: OSV.dev
CVE-2026-76234
GHSA-435g-fcv3-8j26
RUSTSEC-2026-0023
RUSTSEC-2026-0024
RUSTSEC-2026-0025
RUSTSEC-2026-0026
Feb 12, 2026
Bug-Fixes in `libcrux-ecdh`, `libcrux-ed25519`, `libcrux-psq`
Low
Network
Low
None
None
In accordance with our security policy for
|