GitHub Advisoryadvisory · crates.io

GHSA-hrjv-pf36-jpmr oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken

MEDIUM Published 2022-08-18 Modified 2022-08-18 Official page ↗
Ecosystem
crates.io
Packages
oqs
Severity
Moderate
Reviewed
2022-08-18

Affected packages

• crates.io oqs: < 0.7.2 → fixed in 0.7.2

Description

Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2. An efficient key recovery attack on SIDH (preliminary version)

References