{"id":"RUSTSEC-2026-0126","aliases":[],"status":"published","title":"AVX2 Implementation Did Not Fully Reduce Intermediate Values","description":"The AVX2 implementation of ML-DSA did not fully reduce intermediate\ninputs to the inverse NTT, which leads to a testable difference in\npanic behaviour of internal functions compared to the portable\nimplementation.\n\n## Impact\nWe are not aware of inputs to the public key generation, signing or\nverification APIs that trigger a panic in the AVX2 implementation\nbecause the intermediate values were not fully reduced.\n\n## Mitigation\nFrom version `0.0.9` intermediate values on AVX2 platforms are fully\nreduced in alignment with the portable implementation.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-04-27T12:00:00Z","modified":"2026-05-13T10:15:29Z","fixes":[{"ecosystem":"crates.io","package":"libcrux-ml-dsa","fixed_in":["0.0.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"crates.io","package":"libcrux-ml-dsa","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.0.9"}]}]}],"references":[{"url":"https://crates.io/crates/libcrux-ml-dsa","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0126.html","tags":["advisory"]},{"url":"https://github.com/cryspen/libcrux/pull/1395","tags":["web"]}],"sources":{"osv":[{"id":"RUSTSEC-2026-0126","title":"AVX2 Implementation Did Not Fully Reduce Intermediate Values","description":"The AVX2 implementation of ML-DSA did not fully reduce intermediate\ninputs to the inverse NTT, which leads to a testable difference in\npanic behaviour of internal functions compared to the portable\nimplementation.\n\n## Impact\nWe are not aware of inputs to the public key generation, signing or\nverification APIs that trigger a panic in the AVX2 implementation\nbecause the intermediate values were not fully reduced.\n\n## Mitigation\nFrom version `0.0.9` intermediate values on AVX2 platforms are fully\nreduced in alignment with the portable implementation.","status":"published","published":"2026-04-27T12:00:00Z","modified":"2026-05-13T10:15:29.201476Z","updated_at":"2026-11-02T15:53:40.430679Z"}]}}