{ "item_id": "ker-poly1305_key", "kernel": "poly1305_key", "advisory": "RUSTSEC-2026-0073", "crate": "libcrux-poly1305", "pre_version": "0.0.4", "post_version": "0.0.5", "advisory_url": "https://github.com/cryspen/libcrux/pull/1351", "title": "Panic in Standalone MAC Operations", "source_file": "src/lib.rs", "function": "key_len_ok", "signature": "pub fn key_len_ok(key: &[u8]) -> bool", "spec_doc": "Poly1305 one-time keys are r (16 bytes) followed by s (16 bytes): a key is acceptable iff it is exactly 32 bytes.", "bug_class": "logic", "fidelity": "verbatim_logic", "extraction_note": "src/lib.rs KEY_LEN = 16 (standalone mac rejected/panicked on real 32-byte keys)", "witness_args": "&[0u8; 32]", "labels": { "buggy": "libcrux-poly1305@0.0.4", "reference": "libcrux-poly1305@0.0.5" } }