Skip to content

ML-KEM/ML-DSA: harden against fault attacks#9734

Open
SparkiDev wants to merge 1 commit intowolfSSL:masterfrom
SparkiDev:mlkem_mldsa_harden
Open

ML-KEM/ML-DSA: harden against fault attacks#9734
SparkiDev wants to merge 1 commit intowolfSSL:masterfrom
SparkiDev:mlkem_mldsa_harden

Conversation

@SparkiDev
Copy link
Contributor

Description

ML-DSA: check pointer to the y parameter has not be faulted.
ML-KEM: to harden against faultiong, use a different buffer for private seed, sigma, and add a check that the buffer was copied correctly.
SHA-3: fix size of check variables.

Fixes zd#21108

Testing

./configure --disable-shared --enable-mlkem --enable-mldsa --enable-faultharden

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

ML-DSA: check pointer to the y parameter has not be faulted.
ML-KEM: to harden against faultiong, use a different buffer for private
seed, sigma, and add a check that the buffer was copied correctly.
SHA-3: fix size of check variables.
@SparkiDev SparkiDev self-assigned this Feb 3, 2026
@SparkiDev
Copy link
Contributor Author

Jenkins retest this please

Nodes went down.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant