{
 "item_id": "ker-mldsa_norm",
 "kernel": "mldsa_norm",
 "advisory": "RUSTSEC-2026-0076",
 "crate": "libcrux-ml-dsa",
 "pre_version": "0.0.7",
 "post_version": "0.0.8",
 "advisory_url": "https://github.com/cryspen/libcrux/pull/1348",
 "title": "Panic in Signature Hint Decoding During Verification",
 "source_file": "src/ml_dsa_generic.rs",
 "function": "response_bound",
 "signature": "pub fn response_bound(gamma1_exponent: u32, beta: i32) -> i32",
 "spec_doc": "ML-DSA verification bound for the signer response: gamma1 - beta where gamma1 = 2^gamma1_exponent.",
 "bug_class": "logic",
 "fidelity": "verbatim_logic",
 "extraction_note": "src/ml_dsa_generic.rs verify: (2 << GAMMA1_EXPONENT) - BETA instead of (1 << ...) - BETA",
 "witness_args": "17u32, 78i32",
 "labels": {
  "buggy": "libcrux-ml-dsa@0.0.7",
  "reference": "libcrux-ml-dsa@0.0.8"
 }
}