00:00
2026-05-04
blog.himanshuanand.com
cybersecurity
I Read OpenSSL for Fun and Found a Nonce Leak
The article describes a single-character logic bug discovered in OpenSSL version 4.0.0's implementation of the SLH-DSA post-quantum signature algorithm. The bug occurs in the `slh_dsa_sign()` function…