—
RUSTSEC-2026-0126
AVX2 Implementation Did Not Fully Reduce Intermediate Values
Details
The AVX2 implementation of ML-DSA did not fully reduce intermediate inputs to the inverse NTT, which leads to a testable difference in panic behaviour of internal functions compared to the portable implementation.
## Impact We are not aware of inputs to the public key generation, signing or verification APIs that trigger a panic in the AVX2 implementation because the intermediate values were not fully reduced.
## Mitigation From version `0.0.9` intermediate values on AVX2 platforms are fully reduced in alignment with the portable implementation.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/libcrux-ml-dsa
Introduced in:
0.0.0-0Fixed in: 0.0.9Upgrade libcrux-ml-dsa to 0.0.9 or newer (ecosystem crates.io).