GHSA-f6jh-hvg2-9525 crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)
Timing side-channel in crystals-go allows attackers to recover secret keys by timing decapsulation of forged ciphertexts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-f6jh-hvg2-9525?
GHSA-f6jh-hvg2-9525 is a vulnerability in github.com/kudelskisecurity/crystals-go, published on 17 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Patches
Patched in https://github.com/kudelskisecurity/crystals-go/pull/21
Note
This library was written as part of a MsC student project in the Cybersecurity Team at Kudelski Security. It is not actively maintained anymore. It is only intended for research and testing. We discourage its use in any production environment. Kudelski Security does not use this library as part of their commercial offers or product. This has now been clarified on the project's README.
References
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/ldX0ThYJuBo http://kyberslash.cr.yp.to/
Which versions are affected by GHSA-f6jh-hvg2-9525?
3 open source packages ship an affected version, including github.com/kudelskisecurity/crystals-go.
| Package | Affected | Fixed in |
|---|---|---|
github.com/kudelskisecurity/crystals-go Go | All versions | 0.0.0-20240116172146-2a6ca2d4e64d |
github.com/kudelskisecurity/crystals-go Go | All versions | 0.0.0-20240116172146-2a6ca2d4e64d |
github.com/kudelskisecurity/crystals-go Go | All versions | 0.0.0-20240116172146-2a6ca2d4e64d |
How do I fix GHSA-f6jh-hvg2-9525?
Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.
Is GHSA-f6jh-hvg2-9525 being exploited?
There is no known exploitation of GHSA-f6jh-hvg2-9525 in the wild and no public exploit code.
Sources
Also known as GO-2024-2469.