From c53fd02ba7dcf5dc2c9287f814d1e401f26bfcce Mon Sep 17 00:00:00 2001
From: Tony Arcieri <bascule@gmail.com>
Date: Sat, 31 Oct 2026 15:59:55 -0600
Subject: [PATCH] ml-kem v0.3.4

---
 Cargo.lock          |  2 +-
 ml-kem/CHANGELOG.md | 22 ++++++++++++++++++++++
 ml-kem/Cargo.toml   |  2 +-
 3 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 8e32f57..b5a2078 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -761,7 +761,7 @@ checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
 
 [[package]]
 name = "ml-kem"
-version = "0.3.3"
+version = "0.3.4"
 dependencies = [
  "const-oid",
  "criterion",
diff --git a/ml-kem/CHANGELOG.md b/ml-kem/CHANGELOG.md
index 2b157d6..fb61623 100644
--- a/ml-kem/CHANGELOG.md
+++ b/ml-kem/CHANGELOG.md
@@ -5,6 +5,28 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.3.4 (2026-10-31)
+### Changed
+- Improve performance by sampling NTT coefficients block-wise from the XOF ([#387])
+
+### Fixed
+- Redact secret key material from `Debug` output ([#394])
+- Harden equality testing ([#414])
+- Harden zeroization ([#415])
+
+### Security
+- Bump `ctutils` to v0.4.5; MSRV 1.87 ([#405])
+- Harden reduction using newly-hardened `ctutils` ([#409])
+- Bump `module-lattice` to v0.2.4 ([#413])
+
+[#387]: https://github.com/RustCrypto/KEMs/pull/387
+[#394]: https://github.com/RustCrypto/KEMs/pull/394
+[#405]: https://github.com/RustCrypto/KEMs/pull/405
+[#409]: https://github.com/RustCrypto/KEMs/pull/409
+[#414]: https://github.com/RustCrypto/KEMs/pull/414
+[#413]: https://github.com/RustCrypto/KEMs/pull/413
+[#415]: https://github.com/RustCrypto/KEMs/pull/415
+
 ## 0.3.3 (2026-10-17)
 ### Changed
 - Bump `sha3` to v0.12; use `shake` v0.1 ([#326])
diff --git a/ml-kem/Cargo.toml b/ml-kem/Cargo.toml
index a332365..fbe716e 100644
--- a/ml-kem/Cargo.toml
+++ b/ml-kem/Cargo.toml
@@ -4,7 +4,7 @@ description = """
 Pure Rust implementation of the Module-Lattice-Based Key-Encapsulation Mechanism Standard
 (formerly known as Kyber) as described in FIPS 203
 """
-version = "0.3.3"
+version = "0.3.4"
 edition = "2024"
 rust-version = "1.87"
 license = "Apache-2.0 OR MIT"