Issues

• 🐛 [BUG] - fuzz harness over-reads its input, cannot vary TM/AOS frame length, and suppresses crashes

  nasa/CryptoLib#557 · Filter by author 0xiviel opened on Sep 28, 2026

• 🐛 [BUG] - Crypto_check_buffer_size() queries the allocator for a caller-owned frame buffer

  nasa/CryptoLib#556 · Filter by author 0xiviel opened on Sep 28, 2026

• 🐛 [BUG] - SA Rekey Silently Discards the Managed New-IV Field When the Target SA Has shivf_len == 0 — Empty else { // TODO }, Then Reports Success

  bug
  nasa/CryptoLib#552 · Filter by author VissaMoutafis opened on Sep 22, 2026

• 🐛 [BUG] - SA Create Accepts a Transmitted-IV Width Wider Than the Full IV Supplied

  bug
  nasa/CryptoLib#551 · Filter by author VissaMoutafis opened on Sep 22, 2026
  1

• 🐛 [BUG] - sa_delete Zeros abm_len but Never est/ast

  bug
  nasa/CryptoLib#550 · Filter by author VissaMoutafis opened on Sep 22, 2026
  1

• 🐛 [BUG] - Private security advisories filed in June have received no maintainer response

  bug
  nasa/CryptoLib#548 · Filter by author Sebasteuo opened on Sep 18, 2026
  1

• 🐛 [BUG] - support/fuzz/ has not compiled since v1.5.0, and build-fuzz.sh reports success anyway

  bug
  nasa/CryptoLib#546 · Filter by author 0xiviel opened on Sep 15, 2026

• 🐛 [BUG] - sa_create Silently Returns Success for an Out-of-Range SPI

  bug
  nasa/CryptoLib#545 · Filter by author VissaMoutafis opened on Sep 15, 2026

• 🐛 [BUG] - TC PDU Length Subtracts stmacf_len Unconditionally & Clear SAs Reject Well-Formed Frames

  bug
  nasa/CryptoLib#544 · Filter by author VissaMoutafis opened on Sep 15, 2026

• 🐛 [BUG] - OTAR Key Count Derived Entirely From an Unvalidated, Attacker-Controlled TLV Length Field

  bug
  nasa/CryptoLib#540 · Filter by author VissaMoutafis opened on Aug 26, 2026

• 🐛 [BUG] - Conformance - TLV Procedure-Type Bit Written to the Wrong Struct Field — Reply PDUs Executed as Commands

  bug
  nasa/CryptoLib#539 · Filter by author VissaMoutafis opened on Aug 26, 2026

• 🐛 [BUG] - Implementation detail - SA setARSN and setARSNW Never Verify the Target SPI Was Actually Created (Only That It's In-Bounds)

  bug
  nasa/CryptoLib#537 · Filter by author VissaMoutafis opened on Aug 25, 2026

• 🐛 [BUG] - Conformance - sa_setARSNW Does Not Enforce the SA's Authentication-Capability Precondition

  bug
  nasa/CryptoLib#536 · Filter by author VissaMoutafis opened on Aug 25, 2026

• 🐛 [BUG] - Implementation Standard - Unrecognized SA-Management PID Silently Returns Success

  bug
  nasa/CryptoLib#535 · Filter by author VissaMoutafis opened on Aug 25, 2026

• 🐛 [BUG] - Conformance - SA setARSN and setARSNW Always Return Success Regardless of Precondition Failures

  bug
  nasa/CryptoLib#534 · Filter by author VissaMoutafis opened on Aug 25, 2026

• 🐛 [BUG] - Conformance - SA Rekey Never Checks That the New Encryption/Authentication Keys Are Active

  bug
  nasa/CryptoLib#533 · Filter by author VissaMoutafis opened on Aug 25, 2026

• 💡 [REQUEST] - ML-KEM SA key establishment works with CryptoLib unmodified — where should it live?

  nasa/CryptoLib#523 · Filter by author cleitonaugusto opened on Aug 5, 2026

• 🐛 [BUG] - ACS Authentication (CMAC/HMAC) Unconditionally Calls gcry_mac_setiv, Which Those Algorithms Reject — Every Non-AEAD MAC Operation With a Non-Zero SA IV Fails Before the Tag Is Ever Computed

  bug
  nasa/CryptoLib#522 · Filter by author VissaMoutafis opened on Jul 13, 2026
  1

• 🐛 [BUG] - TC Authentication-Only SAs Silently Use the Encryption Cipher (ECS) Engine Instead of the Configured Authentication Cipher (ACS)

  bug
  nasa/CryptoLib#521 · Filter by author VissaMoutafis opened on Jul 13, 2026
  1

• 🐛 [BUG] - Missing Control SPI Check in sa_start

  bug
  nasa/CryptoLib#519 · Filter by author VissaMoutafis opened on Jun 26, 2026

• 🐛 [BUG] - SA REKEY, START, and EXPIRE Return Inconsistent Success Codes

  bug
  nasa/CryptoLib#518 · Filter by author VissaMoutafis opened on Jun 26, 2026

• 🐛 [BUG] - Conformance with the Standard - Key Verification Allows Verification of Non-Active Keys

  bug
  nasa/CryptoLib#517 · Filter by author VissaMoutafis opened on Jun 26, 2026

• 🐛 [BUG] - Key Inventory Missing Range Validation

  bug
  nasa/CryptoLib#516 · Filter by author VissaMoutafis opened on Jun 26, 2026

• 🐛 [BUG] - Key Activation Succeeds on Non-Provisioned Keys

  bug
  nasa/CryptoLib#515 · Filter by author VissaMoutafis opened on Jun 26, 2026

• sa_get_from_spi missing shivf_len <= iv_len cross-field check (sibling of existing arsn/shsnf guard)

  nasa/CryptoLib#512 · Filter by author nurdymuny opened on Jun 9, 2026