Issues

• [bug bounty] The plaintext buffers in scryptenc_file and scryptdec_file_copy are never wiped

  Tarsnap/scrypt#438 · Filter by author woahwhattheheck opened on Sep 6, 2026
  2

• [bug bounty] "scrypt dec" aborts on an assertion when given explicit --logN/-r/-p

  Tarsnap/scrypt#436 · Filter by author woahwhattheheck opened on Sep 6, 2026

• [bug bounty] Output close/flush errors are ignored, so scrypt can exit 0 with incomplete output

  Tarsnap/scrypt#434 · Filter by author sapphiremaid opened on Sep 6, 2026
  1

• [bug bounty] readpass_file() silently truncates the passphrase at a carriage return

  Tarsnap/scrypt#431 · Filter by author woahwhattheheck opened on Sep 6, 2026
  2

• [bug bounty] The expanded AES key is leaked when a write to the output file fails

  Tarsnap/scrypt#429 · Filter by author woahwhattheheck opened on Sep 6, 2026
  2

• [bug bounty] "scrypt enc f f" silently destroys f: the output file is truncated before the input is read

  Tarsnap/scrypt#427 · Filter by author woahwhattheheck opened on Sep 6, 2026
  2

• [bug bounty] "scrypt info" shifts by an unvalidated logN byte from the file header

  Tarsnap/scrypt#425 · Filter by author woahwhattheheck opened on Sep 6, 2026
  2

• [bug bounty] parsenum_float accepts NaN for any bounds; -t maxtime yields p=0 via UB (generalizes #423)

  Tarsnap/scrypt#424 · Filter by author tzh476 opened on Aug 31, 2026
  1

• NaN accepted for -m causes memtouse assertion abort

  Tarsnap/scrypt#423 · Filter by author paulcakeface opened on Aug 25, 2026

• Feature request: allow decryption on low memory systems

  enhancementhelp wanted
  Tarsnap/scrypt#4 · Filter by author coderb opened on Aug 5, 2015
  4