| { | |
| "item_id": "ker-mldsa_norm", | |
| "kernel": "mldsa_norm", | |
| "advisory": "RUSTSEC-2026-0076", | |
| "crate": "libcrux-ml-dsa", | |
| "pre_version": "0.0.7", | |
| "post_version": "0.0.8", | |
| "advisory_url": "https://github.com/cryspen/libcrux/pull/1348", | |
| "title": "Panic in Signature Hint Decoding During Verification", | |
| "source_file": "src/ml_dsa_generic.rs", | |
| "function": "response_bound", | |
| "signature": "pub fn response_bound(gamma1_exponent: u32, beta: i32) -> i32", | |
| "spec_doc": "ML-DSA verification bound for the signer response: gamma1 - beta where gamma1 = 2^gamma1_exponent.", | |
| "bug_class": "logic", | |
| "fidelity": "verbatim_logic", | |
| "extraction_note": "src/ml_dsa_generic.rs verify: (2 << GAMMA1_EXPONENT) - BETA instead of (1 << ...) - BETA", | |
| "witness_args": "17u32, 78i32", | |
| "labels": { | |
| "buggy": "libcrux-ml-dsa@0.0.7", | |
| "reference": "libcrux-ml-dsa@0.0.8" | |
| } | |
| } |