Security1 hSeptember 29, 2026, 01:32

iraca: independent differential verification of ML-KEM (FIPS 203) in RustCrypto

The iraca project verified RustCrypto's post-quantum ml-kem crate against the independent pq-crystals C reference. Keys, ciphertexts and shared secrets matched byte for byte across 128 seeds, and non-canonical keys are correctly rejected per FIPS 203.

DEV Community

Open source

iraca: independent differential verification of ML-KEM (FIPS 203) in RustCrypto

RustCrypto's ml-kem matched pq-crystals byte for byte on 128 seeds
Non-canonical encapsulation keys are rejected as FIPS 203 requires
ML-DSA-87 also matched the dilithium reference in cross-checking
The check does not cover side channels and is not a full audit

#RustCrypto#ML-KEM#FIPS203

Post-quantum key exchange proved unsecurable in 1,700 queries

Software

Google rewrites giflib from C to Rust using Gemini and differential fuzzing

Policy

Airtel tells TRAI 5G network slicing should not be treated as regular QoS differentiation

Security

iraca: independent differential verification of ML-KEM (FIPS 203) in RustCrypto

Post-quantum key exchange proved unsecurable in 1,700 queries

Google rewrites giflib from C to Rust using Gemini and differential fuzzing

Airtel tells TRAI 5G network slicing should not be treated as regular QoS differentiation

Tencent's Palm X brings palmprint verification to standard smartphone cameras