RustCrypto: Signatures has timing side-channel in ML-DSA decomposition
A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature.
Advisories for Cargo/Ml-Dsa package
2026
A timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature.