Issues

• Public API accepts non-canonical expanded ML-KEM decapsulation key representations and exposes inconsistent handling of the resulting state

  RustCrypto/KEMs#389 · Filter by author LuisCastellanos-dev opened on Sep 28, 2026
  3

• frodo-kem: Algorithm::encryption_key_from_decryption_key skips both of the validations its siblings perform

  RustCrypto/KEMs#381 · Filter by author spartan8806 opened on Sep 10, 2026

• Hybrid KEM combiner design feedback: SHA3-256 concat vs HKDF for X25519 + ML-KEM-1024

  RustCrypto/KEMs#346 · Filter by author cleitonaugusto opened on Jun 24, 2026
  2

• Alternative KEM Proposal: EchoPulse-KEM (Symbolic-State Graph Mutation)

  RustCrypto/KEMs#328 · Filter by author TomWartenberg-IRN opened on Jun 8, 2026

• Tracking issue for the release of hqc-kem

  RustCrypto/KEMs#325 · Filter by author faern opened on Jun 5, 2026
  1

• ml-kem/module-lattice: integer_extend_truncate warnings

  RustCrypto/KEMs#308 · Filter by author tarcieri opened on May 5, 2026

• Incremental ML-KEM

  RustCrypto/KEMs#264 · Filter by author ZettaScript opened on Feb 17, 2026
  2

• ml-kem: Don't use FieldElement for compressed values

  RustCrypto/KEMs#26 · Filter by author bifurcation opened on Jun 4, 2024
  25

• Evaluate whether compilation introduces a secret-dependent branch

  RustCrypto/KEMs#25 · Filter by author bifurcation opened on Jun 3, 2024
  3

• Use Codspeed for testing

  RustCrypto/KEMs#24 · Filter by author bifurcation opened on May 31, 2024

• Missing KEMs

  RustCrypto/KEMs#1 · Filter by author tarcieri opened on Aug 16, 2023
  20