2026-03-12 14:18 UTC
@jas@fosstodon.org It looks like there have been rustsec advisories (RUSTSEC-2026-00{23,24,25,26}), but only one of them has a severity of 'high', the other ones have a severity of 'none'.
Anybody can send pull requests to the advisory-db, maybe the author of the blogpost could add to them and adjust the impact/severity/description/title.
Note also (by @djc@hachyderm.io):
https://github.com/cryspen/libcrux/issues/1335
Replies (1)
-
@jas@fosstodon.org 2026-03-12 15:04
@kpcyrd@chaos.social @djc@hachyderm.io Another concern is the Rust to C conversion, that could introduce fun stuff. Reading the 10+kloc https://github.com/openssh/openssh-portable/blob/master/libcrux_mlkem768_sha3.h is not pleasant. Generated by https://github.com/AeneasVerif/eurydice