Various Kyber software libraries in various environments leak secret information into timing, specifically because
The KyberSlash pages were written by Daniel J. Bernstein. The FAQ originally said "I", but some people seemed to have trouble finding this authorship statement, so the FAQ now says "Bernstein" instead.
The permanent link for the KyberSlash pages is https://kyberslash.cr.yp.to.
The issues has not been resolved in the
pqc_kyber crate. A third-party fork that mitigates this attack vector has been published as