Implementation  ·  02 Jun 2026  ·  19 min

Rejection sampling is where the bugs live

Notes from reviewing four ML-KEM implementations, and the timing leak that survived all of them.

← All posts