Browser-based ML-DSA leakage demo — watch a toy hill-climb descend to a CRYSTALS-Dilithium (FIPS 204) secret subkey once one bit of per-signature masking randomness leaks, no lattice reduction, beside the real-scale numbers from IACR ePrint 2026/472. Real local-optimization dynamics. No backends. No simulated math. Runs no attack on real ML-DSA.
cryptography cryptanalysis hill-climbing post-quantum-cryptography side-channel dilithium crypto-lab local-optimization nist-pqc crystals-dilithium ml-dsa fips-204 lattice-cryptography leakage-attack masking-randomness subkey-recovery
-
Updated
Sep 10, 2026 - TypeScript