/ 
Crypt-NaCl-Sodium-2.000-TRIAL
⭐ Starred 9
Security Advisories (2)
CVE-2026-2588 (2026-02-23)

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits.

CVE-2026-30909 (2026-03-08)

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this issue is unlikely as the message length would need to be very large. For bin2hex() the bin_len would have to be > SIZE_MAX / 2 For encrypt() the msg_len would need to be > SIZE_MAX - 16U For aes256gcm_encrypt_afternm() the msg_len would need to be > SIZE_MAX - 16U For seal() the enc_len would need to be > SIZE_MAX - 64U

Changes for version 2.000 - 2026-02-10

  • Support Alien::Sodium v2.000 (libsodium 1.0.18)
  • Added support for sodium_version_string()
  • Added support for Crypt::NaCl::Sodium::add() (sodium_add)
  • Fix some issues with hex2bin()
  • AES128CTR croaks on libsodium >= 1.0.15
  • Minor integer size fixes to string formats
  • Compatibility Changes from 1.0.8.0
    • AES128CTR was dropped in libsodium (1.0.15)
    • Minimum key Byte Size of 16 is now enforced in libsodium (1.0.11)
    • Malleable signatures unsupported unless ED25519_COMPAT defined in libsodium (1.0.9)

Documentation

Crypt::NaCl::Sodium::aead
Authenticated Encryption with Additional Data
Crypt::NaCl::Sodium::auth
Secret-key message authentication
Crypt::NaCl::Sodium::box
Public-key authenticated encryption
Crypt::NaCl::Sodium::generichash
Generic hashing
Crypt::NaCl::Sodium::hash
SHA-2 hash functions
Crypt::NaCl::Sodium::onetimeauth
One-time authentication
Crypt::NaCl::Sodium::pwhash
Password hashing
Crypt::NaCl::Sodium::scalarmult
Diffie-Hellman
Crypt::NaCl::Sodium::secretbox
Secret-key authenticated encryption
Crypt::NaCl::Sodium::shorthash
Short input hashing
Crypt::NaCl::Sodium::sign
Public-key signatures
Crypt::NaCl::Sodium::stream
Stream Ciphers
Data::BytesLocker
Guarded storage for sensitive data

Modules

Crypt::NaCl::Sodium
NaCl compatible modern, easy-to-use library for encryption, decryption, signatures, password hashing and more

Other files