Skip to content
Threat Feed

Product

Libcrux-Ml-Dsa (< 0.0.9)

1 brief RSS
high threat

libcrux-ml-dsa Signature Verification Bypass Vulnerability

The AVX2 implementation of ML-DSA verification in libcrux-ml-dsa mishandles an edge case in the `use_hint` function, potentially allowing an attacker to craft an invalid signature that is accepted by the verifier if the AVX2 implementation is used.

libcrux-ml-dsa signature-bypass vulnerability
2r