# crypto.mlkem: return J\(z\|\|c\) on implicit rejection · gitcafe/zig

[View on GitCafe](https://git.cafe/gitcafe/zig/commit/a0e9130b894f6eeb810f5ad25ff34fe9782b24ba)

Repository: [gitcafe/zig](https://git.cafe/gitcafe/zig)

Visibility: public

Requested revision: a0e9130b894f6eeb810f5ad25ff34fe9782b24ba

Requested commit: a0e9130b894f6eeb810f5ad25ff34fe9782b24ba

Commit: a0e9130b894f6eeb810f5ad25ff34fe9782b24ba

Tree: f92117fb594d1c19aa889ea905686da4b16d6433

Author: Frank Denis

Committer: Frank Denis

## Message

```
crypto.mlkem: return J(z||c) on implicit rejection

The ML-KEM decapsulation was returning z directly when implicit
rejection was triggered, but FIPS 203 specifies it should return
J(z || c) = SHAKE256(z || c).

```

## Parents

- [7f36c4c7d3c8f3bfabb49a922a6156e4f1c61f67](https://git.cafe/gitcafe/zig/commit/7f36c4c7d3c8f3bfabb49a922a6156e4f1c61f67?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zig/tree/a0e9130b894f6eeb810f5ad25ff34fe9782b24ba?format=markdown)