Georgia Tech's Gupta Puts a Ceiling on What One Twiddle Fault Leaks From ML-KEM and ML-DSA Key Generation, arXiv 2610.30383, 21 October 2026: 254 of 256 Coefficients Exposed on Paper, TRL 2

Georgia Tech's Chakshu Gupta proves, in Lean 4, how much a single corrupted twiddle constant in the number-theoretic transform exposes during ML-KEM and ML-DSA key generation: a rank that halves by layer from 128 to 2, a ceiling of 254 of 256 coefficients with one fault per layer, and two coefficients no static twiddle fault can reach. The Defense Monitor reads what the fault attack bound means for a hardware root of trust that regenerates keys from a stored seed, how it extends the 2023 electromagnetic attack on pqm4, and what a module buyer should ask next.