Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rustcrypto/aeads
master @ d3684bb
3
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Cryptographic Issues: 2 prior fixes. Scrutinize any change in this area.
aes-gcm/src/lib.rs: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Issues: Applying the keystream in-place before verifying the authentication tag exposes unauthenticated, potentially attacker-controlled plaintext to the caller during verification failures, breaking the fundamental security guarantees of Authenticated Encryption.
Cryptographic Issues: Violating NIST SP 800-38D specifications by failing to restrict plaintext and associated data to designated maximal lengths (C_MAX) can lead to unsafe counter-wrapping behavior or overflow-induced cryptographic degradation.
Information Disclosure: Failure to propagate zeroization features down to underlying primitives (like the ASCON sponge state) leaves sensitive cryptographic keys or intermediate states residing in memory indefinitely, exposing them to memory dump harvesting.