iraca: independent differential verification of ML-KEM (FIPS 203) in RustCrypto
Qué hicimos iraca es un arnés que verifica la criptografía post-cuántica que el ecosistema Rust realmente usa, diferenciándola contra una implementación independiente . Primer resultado público: el crate ml-kem de RustCrypto (ML-KEM / FIPS 203), muy usado y sin auditoría independiente publicada , resulta idéntico byte a byte a la referencia en C de pq-crystals en generación de claves,…
The iraca project has verified the post-quantum cryptography used in the Rust ecosystem, comparing it to an independent implementation. The results show that the widely-used RustCrypto crate, ml-kem, is identical byte-by-byte to the C reference implementation pq-crystals in key generation, encapsulation, and decapsulation. The crate also correctly rejects non-canonical keys as required by FIPS 203.
This is a conformity check, not a full audit, and does not cover side channels. The NIST standards, including FIPS 203, 204, and 205, are definitive and migration is mandatory.
Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.
