CVE-2026-10097
ML-KEM-1024 x64 AVX2 experiences an implicit rejection failure in the Fujisaki-Okamoto transform, breaking IND-CCA2 security. The AVX2 constant-time ciphertext comparison during decapsulation does not compare the final 32-byte block of the 1568-byte ciphertext, so a ciphertext manipulated in thos...