Skip to content

Bhabani Sankar Das I study the gap between the spec and the code.

A curious mind.

Read the research GitHub 007bsd@proton.me

Latest preprint · 27 Sep 2026 One Unverified Coordinate Is Enough: Key Recovery from Faulty Fujisaki–Okamoto Rejection Checks in ML-KEM A general fault model for the Fujisaki–Okamoto rejection check in ML-KEM and Kyber. Deployed implementations have realised the check incorrectly, … Read on ePrint →

Latest

Coverage · 3 Oct 2026 PostQuantum.com cites the ML-KEM key-recovery result in a piece on crypto-agility. Read more → CVE · 29 Sep 2026 Four more OpenSSL CVEs: three in QUIC, one in the CMP client. Fixed in 4.0.3, 3.6.5, 3.5.9 and 3.4.8. Read more → Advisory · 29 Sep 2026 libspdm advisory DMTF-2026-0004: certificate chain validation did not check CA name and path-length constraints. Read more →

Citations Cited by other researchers Jinnuo Li uses a method similar to ePrint 2026/1682 to recover the secret keys of all ten official Amoeba-576 test vectors, in China’s next-generation commercial cryptography competition. See citations → Disclosures 22 CVEs and 6 advisories Across OpenSSL, libspdm, RustSec, ImageMagick and wolfSSL. Press In the press Articles by news and threat-intel sites covering the research. Wycheproof ML-KEM test vectors in Wycheproof Re-encryption vectors, merged into the suite crypto libraries test against. Open source Pull requests and issues Fixes, fuzzers and test vectors in open-source projects.