dalek-cryptography
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| curve25519-dalek | 1 | – | Jul 27, 2025 |
| ed25519-dalek | 1 | – | Jul 28, 2025 |
Exploited and recent CVEs
- CVE-2022-50237 The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key. 0.2%
- CVE-2024-58262 The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM. 0.2%