EUVD-2026-39553

ML-KEM-1024 x64 AVX2 implicit rejection failure in the Fujisaki-Okamoto transform breaks IND-CCA2 security, allowing decapsulation to deviate from the implicit-rejection behavior required by the standard. The AVX2 constant-time ciphertext comparison used during decapsulation never compared the...

CVE-2026-10097

ML-KEM-1024 x64 AVX2 experiences an implicit rejection failure in the Fujisaki-Okamoto transform, breaking IND-CCA2 security. The AVX2 constant-time ciphertext comparison during decapsulation does not compare the final 32-byte block of the 1568-byte ciphertext, so a ciphertext manipulated in thos...