Headline
GHSA-9763-4f94-gfch: CIRCL's Kyber: timing side-channel (kyberslash2)
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 1.3.7.
References
Package
gomod github.com/cloudflare/circl (Go)
Affected versions
< 1.3.7
Patched versions
1.3.7
Description
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 1.3.7.
References
- kyberslash.cr.yp.to
References
- GHSA-9763-4f94-gfch
- cloudflare/circl@75ef91e
- https://kyberslash.cr.yp.to/
bwesterb published to cloudflare/circl
Jan 8, 2024
Published to the GitHub Advisory Database
Jan 8, 2024
Reviewed
Jan 8, 2024
Last updated
Jan 8, 2024