RUSTSEC-2023-0079: fix typos; add alternative (#1941)

This commit is contained in:
Tony Arcieri
2024-04-12 15:07:31 -06:00
committed by GitHub
parent 6807f8cd07
commit f1cc8f3fec

View File

@@ -34,6 +34,13 @@ The KyberSlash pages were written by Daniel J. Bernstein. The FAQ originally sai
The permanent link for the KyberSlash pages is [https://kyberslash.cr.yp.to](https://kyberslash.cr.yp.to).
## Mitigation status in qpc_kyber crate
## Mitigation status in `pqc_kyber` crate
The issues has not been resolved in the `qpc_kyber` crate. A third-party fork that mitigates this attack vector has been published as [`safe_pqc_kyber`](https://crates.io/crates/safe_pqc_kyber).
The issue has not been resolved in the upstream `pqc_kyber` crate.
A third-party fork that mitigates this attack vector has been published as [`safe_pqc_kyber`](https://crates.io/crates/safe_pqc_kyber).
## Alternatives
The [`ml-kem`](https://crates.io/crates/ml-kem) crate is a maintained
alternative pure Rust implementation of ML-KEM / Kyber.