Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jedisct1/libsodium
master @ 8e3be86
128
Fixes
4
CVEs
CRITICAL
Peak severity
25.7%
Coverage
Highlights
Information Disclosure: 39 prior fixes. Scrutinize any change in this area.
src/libsodium/crypto_core/ed25519/ref10/ed25519_ref10.c: most-fixed (10 issues). Treat as high-risk during review.
25 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Issues: Incomplete subgroup and point validation checks in Ed25519, particularly in checking coordinate constraints or small-order points, have historically allowed attackers to bypass cryptographic validation checks. This relates closely to CVE-2025-15444 and CVE-2025-69277.
Information Disclosure: Failure to clear ephemeral buffers, seeds, private key components, and intermediate scalar variables from the stack after operation completion has historically left sensitive cryptographic materials exposed in lingering memory locations.
Side-Channel Attack: Compiler optimization paths frequently convert constant-time point operations (such as selections, canonical checks, and coordinate operations) into variable-time branching instructions, requiring explicit optimization blockers.