Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
quantus-network/qp-rusty-crystals
master @ 8836cde
15
Fixes
0
CVEs
HIGH
Peak severity
38.5%
Coverage
Highlights
Information Disclosure: 7 prior fixes. Scrutinize any change in this area.
threshold/src/resharing/protocol.rs: most-fixed (3 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Two high-severity fixes in the same component: one exposed secret share/signer fields publicly, another leaked secret-dependent norm diagnostics over the wire. Both indicate a systemic lack of encapsulation and broadcast hygiene for secret data.
Information Disclosure: Removal of Clone from KeccakState and other sensitive types across the Dilithium module shows a pattern of secret state being duplicated via the Clone trait, risking residual copies in memory.
Timing Side-Channel: Two fixes target the rejection sampling loop: one fixed the iteration count, the other removed early-exit conditions. Both address secret-dependent timing leaks in the same core signing path.