Researcher Recovers Most of a Reused ML-KEM Private Key Through Patched wolfSSL Flaws
wolfSSL's optimized ML-KEM code for two processor families compared only part of each incoming ciphertext. In tests on a reused key, Bhabani Sankar Das recovered 98.0% to 98.5% of its secret coefficients. Version 5.9.2 fixes both flaws.


