KyberSlash: division timings depending on secrets in Kyber software

Various Kyber software libraries in various environments leak secret information into timing, specifically because

The KyberSlash pages track which Kyber libraries have this issue, and include a FAQ about the issue.


The KyberSlash pages were written by Daniel J. Bernstein. The FAQ originally said "I", but some people seemed to have trouble finding this authorship statement, so the FAQ now says "Bernstein" instead.


The permanent link for the KyberSlash pages is Currently the pages are also available at (without redirection to HTTPS) to support very old browsers.

Version: This is version 2024.01.07 of the "Introduction" web page.