mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/, except for the backends for platforms other than AArch64 and x8664 and the debug code, is...

ml-kem-key-recovery

Full key recovery from a partial Fujisaki-Okamoto comparison in wolfSSL ML-KEM CVE-2026-6330 NEON and CVE-2026-10097 AVX2. Fixed in wolfSSL 5.9.2. The full technical write-up is published as Cryptology ePrint Archive, Paper 2026/1682 local copy in paper/. See Citation below. Introduction ML-KEM...

camel-pqc-tls

Post-Quantum TLS with Apache Camel This repository contains three examples demonstrating Post-Quantum Cryptography PQC TLS 1.3 handshakes with Apache Camel, using the X25519MLKEM768 hybrid key exchange. X25519MLKEM768 combines classical X25519 elliptic curve Diffie-Hellman with ML-KEM-768 , a...

kroxylicious-pqc-filter

Kroxylicious PQC Record Encryption Filter A Kroxylicious filter plugin that provides transparent Post-Quantum Cryptography PQC record-level encryption for Apache Kafka using ML-KEM FIPS 203 key encapsulation with AES-256-GCM symmetric encryption. Kafka producers and consumers require zero code...

CVE-2026-115408

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

EUVD-2026-110816

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

CVE-2026-115408

The github.com/eclipse-keypont/crypto11/v2 library (versions >= 2.0.0-rc3,

CVE-2026-115408

In "github.com/eclipse-keypont/crypto11/v2" versions "= 2.0.0-rc3, = 2.0.0-rc8", the ML-KEM key-pair lookup functions "FindMLKEMKeyPair", "FindMLKEMKeyPairs", "FindMLKEMKeyPairsWithAttributes" locate the public half of an ML-KEM key pair by "CKAID"/"CKALABEL" and never verify it against the priva...

CVE-2026-115408 ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

CVE-2026-115408 ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

PT-2026-126389

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKA ID/CKA LABEL and never verify it against the private key. In...

CVE-2026-75525

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

CVE-2026-75525 OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

CVE-2026-75525 OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

EUVD-2026-109159

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

CVE-2026-75525

In OpenReception appointment booking software versions 2.1.0 and prior , an unauthenticated remote attacker can perform an ML-KEM key injection into the staff-crypto recipient directory of any tenant. By storing an arbitrary ML-KEM-768 public key under an existing user's identity, the attacker be...

Embedding Large PQC KEMs in IKEv2

Post-quantum key encapsulation mechanisms carry public keys far larger than the established VPN handshake protocol IKEv2 was designed for. At the same time, its initial exchange comprising the public keys cannot be fragmented. In response, the IETF discusses a range of protocol adjustments, yet...

PT-2026-122229

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

Testing TLS 1.3 PQC on Constrained Devices and Microcontrollers

The UK, EU and US governments have set timelines for post-quantum cryptography migration of critical systems, with deadlines ranging from 2028 to 2035. This paper focuses on IoT-class devices and microcontrollers and the viability of using PQC to connect these devices in secure TLS 1.3 connection...

Energy Consumption of Post-Quantum Cryptography on Constrained and General-Purpose Architectures

With Q-day approaching, the transition to post-quantum cryptography PQC has begun, with governments across the US, UK and EU mandating migration to quantum-resistant standards. This paper benchmarks the three NIST-standardised PQC algorithms - FIPS 203 ML-KEM, FIPS 204 ML-DSA and FIPS 205 SLH-DSA...