Skip to content
OpenAdvisories

Package · crates.io

pqc_kyber

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    RUSTSEC-2026-0290

    pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

    ## Summary When `pqc_kyber` is built with the opt-in `avx2` feature on x86_64, its constant-time conditional-move routine `cmov` is a no-op: it never performs the copy. That `cmov` is exactly the step that applies the Fujisaki-Okamoto (FO) implicit rejection …

    pqc_kyber crates.io
  • High 7.4
    GHSA-x5j2-g63m-f8g4

    pqc_kyber KyberSlash: division timings depending on secrets

    Various Kyber software libraries in various environments leak secret information into timing, specifically because * these libraries include a line of code that divides a secret numerator by a public denominator, * the number of CPU cycles for division in var…

    pqc_kyber crates.io