GitHub Advisoryadvisory · crates.io
GHSA-hrjv-pf36-jpmr oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
MEDIUM
Official page ↗
- Ecosystem
- crates.io
- Packages
- oqs
- Severity
- Moderate
- Reviewed
- 2022-08-18
Affected packages
• crates.io oqs: < 0.7.2 → fixed in 0.7.2
Description
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol.
As a result, the secret key of SIKEp751 can be recovered in a matter of hours.
The SIKE and SIDH schemes will be removed from oqs 0.7.2.
An efficient key recovery attack on SIDH (preliminary version)