CVE-2026-22705: medium-severity vulnerability in RustCrypto signatures
RustCrypto: Signatures has timing side-channel in ML-DSA decomposition
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A timing side-channel vulnerability was found in RustCrypto's ML-DSA signature generation. An attacker could potentially extract secret key information by measuring how long the signing operation takes, compromising the security of digital signatures.
The Decompose algorithm in ML-DSA signing exhibits timing variations dependent on secret data, enabling cache/timing-based side-channel attacks to recover private key material. This requires physical proximity or network access to measure execution time during signature generation. The vulnerability has been mitigated in version 0.1.0-rc.2 through constant-time implementation.
In the same product, most dangerous first.