{"id":"CVE-2026-76234","summary":"libcrux before 0.0.6 Cryptographic Implementation Bug Fixes","details":"libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for imported X25519 secret keys); libcrux-ed25519 performed a duplicated clamping step during key generation; and libcrux-psq panicked instead of propagating an AEADError. These were fixed in the respective patched releases.","aliases":["GHSA-435g-fcv3-8j26","RUSTSEC-2026-0023","RUSTSEC-2026-0024","RUSTSEC-2026-0025","RUSTSEC-2026-0026"],"modified":"2026-08-23T03:42:54.175488751Z","published":"2026-08-19T14:02:14.481Z","database_specific":{"cwe_ids":["CWE-347"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76234.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76234.json"},{"type":"ADVISORY","url":"https://github.com/celabshq/libcrux/security/advisories/GHSA-435g-fcv3-8j26"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76234"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/libcrux-before-cryptographic-implementation-bug-fixes"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/celabshq/libcrux","events":[{"introduced":"0"},{"fixed":"c5fb80f37530ee9b2df9501ae5ff8cb4a973a4bd"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"0.0.6"},{"fixed":"0.0.7"}],"source":"AFFECTED_FIELD"}}],"versions":["libcrux-sha3-v0.0.5","libcrux-platform-v0.0.3","libcrux-ml-kem-v0.0.5","libcrux-ml-dsa-v0.0.5","libcrux-aesgcm-v0.0.5","libcrux-rsa-v0.0.5","libcrux-ecdsa-v0.0.5","libcrux-digest-v0.0.5","libcrux-blake2-v0.0.5","libcrux-aead-v0.0.5","libcrux-traits-v0.0.5","libcrux-sha3-v0.0.6","libcrux-sha2-v0.0.5","libcrux-secrets-v0.0.5","libcrux-psq-v0.0.6","libcrux-p256-v0.0.5","libcrux-ml-kem-v0.0.6","libcrux-ml-dsa-v0.0.6","libcrux-kem-v0.0.5","libcrux-intrinsics-v0.0.5","libcrux-hmac-v0.0.5","libcrux-hkdf-v0.0.5","libcrux-ed25519-v0.0.5","libcrux-ecdh-v0.0.5","libcrux-curve25519-v0.0.5","libcrux-chacha20poly1304-v0.0.5","libcrux-aesgcm-v0.0.6","core-models-v0.0.5","libcrux-traits-v0.0.4","libcrux-sha3-v0.0.4","libcrux-sha2-v0.0.4","libcrux-secrets-v0.0.4","libcrux-rsa-v0.0.4","libcrux-psq-v0.0.5","libcrux-poly1305-v0.0.4","libcrux-p256-v0.0.4","libcrux-ml-kem-v0.0.4","libcrux-ml-dsa-v0.0.4","libcrux-kem-v0.0.4","libcrux-intrinsics-v0.0.4","libcrux-hmac-v0.0.4","libcrux-hkdf-v0.0.4","libcrux-hacl-rs-v0.0.4","libcrux-ed25519-v0.0.4","libcrux-ecdsa-v0.0.4","libcrux-ecdh-v0.0.4","libcrux-digest-v0.0.4","libcrux-curve25519-v0.0.4","libcrux-chacha20poly1305-v0.0.4","libcrux-blake2-v0.0.4","libcrux-aesgcm-v0.0.4","libcrux-aead-v0.0.4","core-models-v0.0.4","libcrux-rsa-v0.0.4-pre.1","libcrux-psq-v0.0.5-pre.1","libcrux-p256-v0.0.4-pre.1","libcrux-ml-kem-v0.0.4-pre.1","libcrux-ml-dsa-v0.0.4-pre.1","libcrux-kem-v0.0.4-pre.1","libcrux-hmac-v0.0.4-pre.1","libcrux-hkdf-v0.0.4-pre.1","libcrux-ed25519-v0.0.4-pre.1","libcrux-ecdsa-v0.0.4-pre.1","libcrux-ecdh-v0.0.4-pre.1","libcrux-digest-v0.0.4-pre.1","libcrux-aead-v0.0.4-pre.1","libcrux-sha3-v0.0.4-pre.1","libcrux-sha2-v0.0.4-pre.1","libcrux-poly1305-v0.0.4-pre.2","libcrux-curve25519-v0.0.4-pre.1","libcrux-chacha20poly1305-v0.0.4-pre.1","libcrux-blake2-v0.0.4-pre.1","libcrux-aesgcm-v0.0.4-pre.1","libcrux-traits-v0.0.4-pre.1","libcrux-secrets-v0.0.4-pre.1","libcrux-poly1305-v0.0.4-pre.1","libcrux-intrinsics-v0.0.4-pre.1","libcrux-hacl-rs-v0.0.4-pre.1","core-models-v0.0.4-pre.1","libcrux-ml-dsa-v0.0.3","libcrux-traits","libcrux-test-utils-v0.0.3","libcrux-sha3-v0.0.3","libcrux-sha2","libcrux-secrets-v0.0.3","libcrux-rsa-v0.0.3","libcrux-psq-v0.0.3","libcrux-poly1305-v0.0.3","libcrux-p256","libcrux-ml-kem-v0.0.3","libcrux-macros","libcrux-kem-v0.0.3","libcrux-intrinsics","libcrux-hmac","libcrux-hkdf","libcrux-hacl-rs","libcrux-ed25519","libcrux-ecdsa-v0.0.3","libcrux-ecdh","libcrux-curve25519","libcrux-chacha20poly1305-v0.0.3","libcrux-blake2-v0.0.3","core-models","libcrux-sha3-v0.0.3-alpha.3","libcrux-sha2-v0.0.3-alpha.3","libcrux-psq-v0.0.3-alpha.3","libcrux-poly1305-v0.0.3-alpha.3","libcrux-ml-kem-v0.0.3-alpha.3","libcrux-ml-dsa-v0.0.3-alpha.3","libcrux-kem-v0.0.3-alpha.3","libcrux-hacl-rs-v0.0.3-alpha.3","libcrux-curve25519-v0.0.3-alpha.3","libcrux-chacha20poly1305-v0.0.3-alpha.3","core-models-v0.0.3-alpha.3","libcrux-psq-v0.0.3-alpha.1","libcrux-ed25519-v0.0.3-alpha.1","libcrux-ecdsa-v0.0.3-alpha.1","libcrux-chacha20poly1305-v0.0.3-alpha.1","libcrux-blake2-v0.0.3-alpha.1","libcrux-sha2-v0.0.3-alpha.1","libcrux-poly1305-v0.0.3-alpha.1","libcrux-p256-v0.0.3-alpha.1","libcrux-kem-v0.0.3-alpha.1","libcrux-hmac-v0.0.3-alpha.1","libcrux-hkdf-v0.0.3-alpha.1","libcrux-ecdh-v0.0.3-alpha.1","libcrux-curve25519-v0.0.3-alpha.1","libcrux-traits-v0.0.3-alpha.1","libcrux-test-util-v0.0.3-alpha.1","libcrux-secrets-v0.0.3-alpha.1","libcrux-ml-kem-v0.0.3-alpha.1","libcrux-ml-dsa-v0.0.3-alpha.1","libcrux-macros-v0.0.3-alpha.1","libcrux-hacl-rs-v0.0.3-alpha.1","libcrux-sha3-v0.0.2","libcrux-rsa-v0.0.2","libcrux-psq-v0.0.2","libcrux-poly1305-v0.0.2","libcrux-ml-kem-v0.0.2","libcrux-ml-dsa-v0.0.2","libcrux-kem-v0.0.2","libcrux-ecdsa-v0.0.2","libcrux-chacha20poly1305-v0.0.2","libcrux-blake2-v0.0.2","cavp-v0.0.2","libcrux-sha3-v0.0.2-beta.3","libcrux-rsa-v0.0.2-beta.3","libcrux-psq-v0.0.2-beta.3","libcrux-platform-v0.0.2-beta.3","libcrux-p256-v0.0.2-beta.3","libcrux-ml-kem-v0.0.2-beta.3","libcrux-ml-dsa-v0.0.2-beta.3","libcrux-macros-v0.0.2-beta.3","libcrux-kem-v0.0.2-beta.3","libcrux-intrinsics-v0.0.2-beta.3","libcrux-hmac-v0.0.2-beta.3","libcrux-hkdf-v0.0.2-beta.3","libcrux-hacl-rs-v0.0.2-beta.3","libcrux-ed25519-v0.0.2-beta.3","libcrux-ecdsa-v0.0.2-beta.3","libcrux-ecdh-v0.0.2-beta.3","libcrux-chacha20poly1305-v0.0.2-beta.3","libcrux-blake2-v0.0.2-beta.3","cavp-v0.0.2-beta.3","libcrux-sha3-v0.0.2-beta.2","cavp-v0.0.2-beta.2","v0.0.2-alpha.3","libcrux-kem-v0.0.2-alpha.3","libcrux-hmac-v0.0.2-alpha.3","libcrux-hkdf-v0.0.2-alpha.3","libcrux-hacl-v0.0.2-alpha.3","libcrux-ecdh-v0.0.2-alpha.3","libcrux-sha3-v0.0.2-alpha.3","libcrux-platform-v0.0.2-alpha.3","libcrux-ml-kem-v0.0.2-alpha.3","libcrux-intrinsics-v0.0.2-alpha.3","cavp-v0.0.2-alpha.3","libcrux-sha3-v0.0.2-alpha.2","libcrux-platform-v0.0.2-alpha.2","libcrux-ml-kem-v0.0.2-alpha.2","libcrux-intrinsics-v0.0.2-alpha.2","v0.0.2-pre.2","v0.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76234.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}