ML-KEM's 12-bit decompression uses incorrect assertions

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: P4
    • 27
    • Affects Version/s: 24, 25, 26, 27
    • Component/s: security-libs
    • 24
    • generic
    • generic

      Currently in ML-KEM's 12-bit decompression method (twelve2sixteen()) the assertion is incorrect:

                  assert ((remainder == 0) || (remainder == 48)) &&
                  (index + i * 96 <= condensed.length);
          implKyber12To16(condensed, index, parsed, parsedLength);

      From [~frakoczi]: "All of the calls are processing 192 or 384 bytes (and producing 128 or 256 shorts)."

            Assignee:
            Ferenc Rakoczi
            Reporter:
            Shawn Emery
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: