Advisoriesby IbisCloudflareGHSA-9763-4f94-gfch
Kyber: timing side-channel (kyberslash2)
Fix: upgrade to 1.3.7 or later
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 1.3.7.
References
- [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/cloudflare/circl Go | < 1.3.7 | 1.3.7 |
Details and references
- Severity from
- GitHub (reviewed advisory)