/ 
CryptX-0.088
⭐ Starred 36 / Crypt::Stream::Sober128
Security Advisories (1)
CVE-2026-41565 (2026-05-28)

CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.

NAME

Crypt::Stream::Sober128 - Stream cipher Sober128

SYNOPSIS

use Crypt::Stream::Sober128;

# encrypt
$key = "1234567890123456";
$iv  = "123456789012";
$stream = Crypt::Stream::Sober128->new($key, $iv);
$ct = $stream->crypt("plain message");

# decrypt
$key = "1234567890123456";
$iv  = "123456789012";
$stream = Crypt::Stream::Sober128->new($key, $iv);
$pt = $stream->crypt($ct);

DESCRIPTION

Provides an interface to the Sober128 stream cipher.

METHODS

new

$stream = Crypt::Stream::Sober128->new($key, $iv);
# $key .. keylen must be multiple of 4 bytes
# $iv  .. ivlen must be multiple of 4 bytes

crypt

$ciphertext = $stream->crypt($plaintext);
#or
$plaintext = $stream->crypt($ciphertext);

keystream

$random_key = $stream->keystream($length);

clone

$stream->clone();

SEE ALSO