UNKNOWN Go
CIRCL's Kyber: timing side-channel (kyberslash2)
GHSA-9763-4f94-gfch · GO-2024-2453
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 1.3.7.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes