private-landing

Private Landing Learn authentication by building it right. Live Demo · Threat Model · Auth Flows · ADRs Demo note: The login endpoint is protected by adaptive PoW challenges — repeated failures return increasing proof-of-work difficulty. Cache-backed rate limiting is implemented and tested but no...

[SECURITY] Fedora 43 Update: rust-ctutils-0.4.5-1.fc43

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 44 Update: rust-ctutils-0.4.5-1.fc44

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

[SECURITY] Fedora 45 Update: rust-ctutils-0.4.5-1.fc45

Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports const fn where appropriate. Built on the cmov crate which provides architecture- specific predication intrinsics. Heavily inspired by the subtle crate...

Fedora 43 : rust-ctutils (2026-ba0a45059f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ba0a45059f advisory. Update to version 0.4.5. This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures. Tenable...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/, except for the backends for platforms other than AArch64 and x8664 and the debug code, is...

[SECURITY] Fedora 45 Update: rust-constant_time_eq-0.6.1-1.fc45

Compares two equal-sized byte strings in constant time...

fips203

NCC Group: FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 Initial Public Draft Module-Lattice-Based Key-Encapsulation Mechanism Standard written in pure Rust for server, desktop, browser and embedded applications. The source repository includes examples demonstrating...

Updated weechat package fixes security vulnerabilities

Decompression Bomb in Relay WebSocket DoS. CVE-2026-53524 Non-Constant-Time Password Hash Comparison in Relay Authentication. CVE-2026-53525...

MGASA-2026-0561 Updated weechat package fixes security vulnerabilities

Decompression Bomb in Relay WebSocket DoS. CVE-2026-53524 Non-Constant-Time Password Hash Comparison in Relay Authentication. CVE-2026-53525...

RUSTSEC-2026-0385 Non-constant-time mask generation and `u128` comparisons

Summary The ctutils::Choice type has mask generation functions for each unsigned integer size u8, u16, u32, u64, u128. These are const fn and therefore can't reuse the asm!-backed mask generation in the cmov crate that's otherwise used to ensure constant-time. In releases prior to v0.4.4, the...

Non-constant-time mask generation and `u128` comparisons

Summary The ctutils::Choice type has mask generation functions for each unsigned integer size u8, u16, u32, u64, u128. These are const fn and therefore can't reuse the asm!-backed mask generation in the cmov crate that's otherwise used to ensure constant-time. In releases prior to v0.4.4, the...

CVE-2026-87946

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CLEANSTART-2026-XR25689 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel

CVE-2026-77696 affects multiple packages. Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. See references for individual vulnerability details...

CLEANSTART-2026-YQ62547 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms

CVE-2026-54875 affects multiple packages. Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. See references for individual vulnerability details...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs must be compared in constant time. Use the appropriate helper function for this...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

CVE-2026-18036 NTRU leaks private key information by reducing secret values with a non-constant-time integer division

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036 NTRU leaks private key information by reducing secret values with a non-constant-time integer division

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...