RustCrypto elliptic-curves 0.14.0-pre.0/0.14.0-rc.0 entropy

Summaryinfo

A vulnerability classified as problematic has been found in RustCrypto elliptic-curves 0.14.0-pre.0/0.14.0-rc.0. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in entropy. This vulnerability is known as CVE-2026-22698. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.

Detailsinfo

A vulnerability was found in RustCrypto elliptic-curves 0.14.0-pre.0/0.14.0-rc.0. It has been classified as problematic. This affects some unknown processing. The manipulation with an unknown input leads to a entropy vulnerability. CWE is classifying the issue as CWE-331. The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others. This is going to have an impact on confidentiality. The summary by CVE is:

RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc.0, a critical vulnerability exists in the SM2 Public Key Encryption (PKE) implementation where the ephemeral nonce k is generated with severely reduced entropy. A unit mismatch error causes the nonce generation function to request only 32 bits of randomness instead of the expected 256 bits. This reduces the security of the encryption from a 128-bit level to a trivial 16-bit level, allowing a practical attack to recover the nonce k and decrypt any ciphertext given only the public key and ciphertext. This issue has been patched via commit e4f7778.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-22698 since 01/08/2026. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1600.001 according to MITRE ATT&CK.

Applying the patch 4781762f23ff22ab34763410f648128055c93731 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-1876). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• RustCrypto

Name

• elliptic-curves

Version

• 0.14.0-pre.0
• 0.14.0-rc.0

License

• open-source

Website

• Product: https://github.com/RustCrypto/elliptic-curves/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion