| { | |
| "item_id": "ker-poly1305_key", | |
| "kernel": "poly1305_key", | |
| "advisory": "RUSTSEC-2026-0073", | |
| "crate": "libcrux-poly1305", | |
| "pre_version": "0.0.4", | |
| "post_version": "0.0.5", | |
| "advisory_url": "https://github.com/cryspen/libcrux/pull/1351", | |
| "title": "Panic in Standalone MAC Operations", | |
| "source_file": "src/lib.rs", | |
| "function": "key_len_ok", | |
| "signature": "pub fn key_len_ok(key: &[u8]) -> bool", | |
| "spec_doc": "Poly1305 one-time keys are r (16 bytes) followed by s (16 bytes): a key is acceptable iff it is exactly 32 bytes.", | |
| "bug_class": "logic", | |
| "fidelity": "verbatim_logic", | |
| "extraction_note": "src/lib.rs KEY_LEN = 16 (standalone mac rejected/panicked on real 32-byte keys)", | |
| "witness_args": "&[0u8; 32]", | |
| "labels": { | |
| "buggy": "libcrux-poly1305@0.0.4", | |
| "reference": "libcrux-poly1305@0.0.5" | |
| } | |
| } |