PT-2026-65408

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions 1.73 through 1.77 Description Three ML-KEM CRYSTALS-Kyber routines perform non-constant-time division of secret-derived polynomial coefficients by the modulus q. The affected routines are Poly.toMsg, which decod...