Neat to see some analysis of #Kyber under a kleptographic threat model in which the attacker can subvert the user's code to compromise security while remaining undetectable.
Three attacks are presented in the paper targeting the implicit rejection of Kyber.
Add comment