STATE OF POST-QUANTUM CRYPTOGRAPHY IMPLEMENTATIONS

Summary from the TLDR InfoSec newsletter

Quarkslab's differential fuzzer DeltAFLy found that seven of ten tested libraries, including liboqs, AWS-LC, and libcrux, accepted malformed ML-DSA private keys with out-of-range coefficients that can bias rejection sampling and leak secret key material, while only OpenSSL, BoringSSL, and SymCrypt rejected them. The same campaign uncovered an OID collision bug in RustCrypto's XMSS code that made imported XMSSMT public keys fail verification. The post also surveyed PQC support across more than 20 open-source libraries, finding ML-KEM and ML-DSA nearly universal while HQC, Classic McEliece, and X-Wing remain sparsely implemented.