camel-pqc-tls

Apache Camel을 사용한 포스트퀀텀 TLS 이 저장소에는 Apache Camel을 사용하여 포스트퀀텀 암호화PQC TLS 1.3 핸드셰이크 를 시연하는 세 가지 예제가 포함되어 있으며, X25519MLKEM768 하이브리드 키 교환을 사용합니다. X25519MLKEM768은 기존의 X25519 타원 곡선 Diffie-Hellman과 포스트퀀텀 격자 기반 키 캡슐화 메커니즘인 ML-KEM-768NIST FIPS 203을 결합합니다. 두 알고리즘이 함께 실행되므로 하나가 깨지더라도 보안이 유지됩니다. 예제 예제| JDK|...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

PT-2026-102808

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.63.0 Description The hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid mlkem.rs accepts an all-zero 32-byte peer X25519 public key within the server dh and compute shared secret functions. This allow...

CVE-2026-48088: Missing Authorization

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route POST /api/tenants/tenantId/staff/staffId/crypto accepts and stores attacker-controlled ML-KEM-768 public keys against any tenant on the platform without...