Skip to content

Kyber: timing side-channel (kyberslash2)

High
bwesterb published GHSA-9763-4f94-gfch Jan 8, 2024

Package

gomod github.com/cloudflare/circl (Go)

Affected versions

≤ 1.3.6

Patched versions

1.3.7

Description

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

Severity

High

CVE ID

No known CVE

Weaknesses

No CWEs