Various Kyber software libraries in various environments leak secret information into timing, specifically because
The KyberSlash pages track which Kyber libraries have this issue, and include a FAQ about the issue.
The KyberSlash pages were written by Daniel J. Bernstein. The FAQ originally said "I", but some people seemed to have trouble finding this authorship statement, so the FAQ now says "Bernstein" instead.
The permanent link for the KyberSlash pages is https://kyberslash.cr.yp.to.
pqc_kyber
crateThe issue has not been resolved in the upstream pqc_kyber
crate.
A third-party fork that mitigates this attack vector has been published as safe_pqc_kyber
.
The ml-kem
crate is a maintained
alternative pure Rust implementation of ML-KEM / Kyber.