—

RUSTSEC-2026-0163

`pqcrypto-internals` is unmaintained: upstream PQClean project being archived

Details

This crate provides internal FFI utilities for the `pqcrypto-*` ecosystem, directly wrapping C implementations from [PQClean](https://github.com/PQClean/PQClean). The PQClean project is being archived in or after July 2026 (see [PQClean/PQClean#604](https://github.com/PQClean/PQClean/issues/604)), after which no further security patches or bug fixes will be applied to the upstream implementations.

As a result, this crate and the broader `pqcrypto-*` ecosystem will no longer receive updates.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/pqcrypto-internals

Introduced in: 0.0.0-0

No fixed version published yet for pqcrypto-internals. Pin to a known-safe version or switch to an alternative.

References

https://crates.io/crates/pqcrypto-internals[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2026-0163.html[ADVISORY]
https://github.com/rustpq/pqcrypto/issues/97[REPORT]