Register | Log in

libcryptx-perl

Perl module that provides a self-contained cryptographic toolkit

Choose email to subscribe with

general

source: libcryptx-perl (main)
version: 0.091-1
maintainer: Debian Perl Group (archive) (DMD) (LowNMU)
uploaders: Lucas Kanashiro (DMD)
arch: any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.069-1
oldstable: 0.077-1
stable: 0.085-1+deb13u1
stable-bpo: 0.090-1~bpo13+1
testing: 0.091-1
unstable: 0.091-1

versioned links

0.069-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.077-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.085-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.090-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.091-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libcryptx-perl (1 bugs: 0, 1, 0, 0)

action needed

4 security issues in bookworm high

There are 4 open security issues in bookworm.

2 important issues:

CVE-2026-13758: CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so its run time depends on the number of matching leading bytes. This affects all five AEAD modes: GCM, CCM, ChaCha20Poly1305, EAX and OCB. The one-shot *_decrypt_verify helpers are unaffected; they verify the tag inside libtomcrypt with a constant-time comparison. The timing difference is a tag-verification oracle. An attacker who can submit many candidate tags for the same nonce, ciphertext and associated data while measuring the timing precisely enough may recover the expected tag byte by byte and forge a message that verifies.
CVE-2026-41565: CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.

2 issues postponed or untriaged:

CVE-2025-40914: (needs triaging) Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
CVE-2026-41564: (needs triaging) CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery. This affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process.

Created: 2025-06-11 Last update: 2026-09-01 22:00

4 security issues in bullseye high

There are 4 open security issues in bullseye.

2 important issues:

CVE-2026-13758: CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so its run time depends on the number of matching leading bytes. This affects all five AEAD modes: GCM, CCM, ChaCha20Poly1305, EAX and OCB. The one-shot *_decrypt_verify helpers are unaffected; they verify the tag inside libtomcrypt with a constant-time comparison. The timing difference is a tag-verification oracle. An attacker who can submit many candidate tags for the same nonce, ciphertext and associated data while measuring the timing precisely enough may recover the expected tag byte by byte and forge a message that verifies.
CVE-2026-41565: CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.

2 issues postponed or untriaged:

CVE-2025-40914: (postponed; to be fixed through a stable update) Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
CVE-2026-41564: (postponed; to be fixed through a stable update) CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery. This affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process.

Created: 2026-05-28 Last update: 2026-08-28 18:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.091-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 21a16bbb50263f3ed566b79968ad05e79f34ee96
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 22:20:36 2026 +0100

    update changelog
    
    Gbp-Dch: Ignore

commit 5e0d10e520e37c526d86488075002b625999055c
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 22:20:36 2026 +0100

    Convert debian/watch to version 5.

Created: 2026-11-07 Last update: 2026-11-07 22:20

3 low-priority security issues in trixie low

There are 3 open security issues in trixie.

3 issues left for the package maintainer to handle:

CVE-2025-40914: (needs triaging) Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
CVE-2026-13758: (needs triaging) CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so its run time depends on the number of matching leading bytes. This affects all five AEAD modes: GCM, CCM, ChaCha20Poly1305, EAX and OCB. The one-shot *_decrypt_verify helpers are unaffected; they verify the tag inside libtomcrypt with a constant-time comparison. The timing difference is a tag-verification oracle. An attacker who can submit many candidate tags for the same nonce, ciphertext and associated data while measuring the timing precisely enough may recover the expected tag byte by byte and forge a message that verifies.
CVE-2026-41565: (needs triaging) CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.

You can find information about how to handle these issues in the security team's documentation.

Created: 2025-06-11 Last update: 2026-09-01 22:00

testing migrations

This package will soon be part of the perl-5.44 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[2026-09-02] libcryptx-perl 0.091-1 MIGRATED to testing (Debian testing watch)
[2026-08-28] Accepted libcryptx-perl 0.091-1 (source) into unstable (gregor herrmann)
[2026-07-04] Accepted libcryptx-perl 0.090-1~bpo13+1 (amd64 source) into stable-backports (Debian FTP Masters) (signed by: Philip Hands)
[2026-06-25] libcryptx-perl 0.090-1 MIGRATED to testing (Debian testing watch)
[2026-06-22] Accepted libcryptx-perl 0.090-1 (source) into unstable (gregor herrmann)
[2026-05-23] libcryptx-perl 0.089-1 MIGRATED to testing (Debian testing watch)
[2026-05-11] Accepted libcryptx-perl 0.089-1 (source) into unstable (gregor herrmann)
[2026-05-07] Accepted libcryptx-perl 0.088-1 (source) into unstable (gregor herrmann)
[2026-04-30] Accepted libcryptx-perl 0.085-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-04-25] libcryptx-perl 0.087-2 MIGRATED to testing (Debian testing watch)
[2026-04-23] Accepted libcryptx-perl 0.087-2 (source) into unstable (Salvatore Bonaccorso)
[2025-08-18] libcryptx-perl 0.087-1 MIGRATED to testing (Debian testing watch)
[2025-08-10] Accepted libcryptx-perl 0.087-1 (source) into unstable (gregor herrmann)
[2025-02-18] libcryptx-perl 0.085-1 MIGRATED to testing (Debian testing watch)
[2025-02-15] Accepted libcryptx-perl 0.085-1 (source) into unstable (gregor herrmann)
[2024-10-31] libcryptx-perl 0.084-1 MIGRATED to testing (Debian testing watch)
[2024-10-27] Accepted libcryptx-perl 0.084-1 (source) into unstable (gregor herrmann)
[2024-10-24] libcryptx-perl 0.082.001-1 MIGRATED to testing (Debian testing watch)
[2024-10-14] Accepted libcryptx-perl 0.082.001-1 (source) into unstable (gregor herrmann)
[2024-10-10] libcryptx-perl 0.082-1 MIGRATED to testing (Debian testing watch)
[2024-10-07] Accepted libcryptx-perl 0.082-1 (source) into unstable (gregor herrmann)
[2024-10-05] libcryptx-perl 0.081-2 MIGRATED to testing (Debian testing watch)
[2024-10-02] Accepted libcryptx-perl 0.081-2 (source) into unstable (gregor herrmann)
[2024-09-16] Accepted libcryptx-perl 0.081-1 (source) into unstable (gregor herrmann)
[2023-11-27] libcryptx-perl 0.080-2 MIGRATED to testing (Debian testing watch)
[2023-11-27] libcryptx-perl 0.080-2 MIGRATED to testing (Debian testing watch)
[2023-11-24] Accepted libcryptx-perl 0.080-2 (source) into unstable (gregor herrmann)
[2023-11-04] libcryptx-perl 0.080-1 MIGRATED to testing (Debian testing watch)
[2023-11-01] Accepted libcryptx-perl 0.080-1 (source) into unstable (gregor herrmann)
[2023-06-27] libcryptx-perl 0.078-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.091-1
2 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing