GitHub Advisoryadvisory · crates.io

GHSA-p4v8-jgcv-9g75 safe_pqc_kyber leaks parts of secret keys

HIGH Published 2024-01-03 Modified 2024-01-03 Official page ↗

Ecosystem: crates.io
Packages: safe_pqc_kyber
Severity: High
Reviewed: 2024-01-03

Affected packages

• crates.io safe_pqc_kyber: < 0.6.2 → fixed in 0.6.2

Description

Impact On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn (parts of) the secret key. Does not apply to ephemeral usage, such as when used in the regular way in TLS. Patches Patched in 0.6.2. References • kyberslash.cr.yp.to

References

https://github.com/bwesterb/argyle-kyber/security/advisories/GHSA-p4v8-jgcv-9g75 web
https://github.com/bwesterb/argyle-kyber/commit/b5c6ad13f4eece80e59c6ebeafd787ba1519f5f6 web
https://github.com/bwesterb/argyle-kyber package
https://kyberslash.cr.yp.to web