GHSA-9763-4f94-gfch: CIRCL's Kyber: timing side-channel (kyberslash2)

January 8, 2024 (updated May 20, 2024)

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

References

github.com/advisories/GHSA-9763-4f94-gfch
github.com/cloudflare/circl
github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d
github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch
kyberslash.cr.yp.to/

Detect and mitigate GHSA-9763-4f94-gfch with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →