{"answers":{"affected":"3 open source packages ship an affected version, including github.com/kudelskisecurity/crystals-go.","exploited":"There is no known exploitation of GHSA-f6jh-hvg2-9525 in the wild and no public exploit code.","fix":"Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.","what":"GHSA-f6jh-hvg2-9525 is a vulnerability in github.com/kudelskisecurity/crystals-go, published on 17 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for GHSA-f6jh-hvg2-9525 and fix it if it is affected.\n\nWhat it is: GHSA-f6jh-hvg2-9525 is a vulnerability in github.com/kudelskisecurity/crystals-go, published on 17 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of GHSA-f6jh-hvg2-9525 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- github.com/kudelskisecurity/crystals-go (Go): affected all versions; fixed in 0.0.0-20240116172146-2a6ca2d4e64d\n- github.com/kudelskisecurity/crystals-go (Go): affected all versions; fixed in 0.0.0-20240116172146-2a6ca2d4e64d\n- github.com/kudelskisecurity/crystals-go (Go): affected all versions; fixed in 0.0.0-20240116172146-2a6ca2d4e64d\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/GHSA-f6jh-hvg2-9525/ (Markdown: https://insights.sbomify.com/GHSA-f6jh-hvg2-9525/index.md)","id":"GHSA-f6jh-hvg2-9525","markdown":"https://insights.sbomify.com/GHSA-f6jh-hvg2-9525/index.md","name":"GHSA-f6jh-hvg2-9525","record":{"aliases":["GO-2024-2469"],"analysis":{"component_type":"library","fix_type":"patch","impacts":["data_read"],"network_reachable":"yes","non_default_config":false,"product_category":"Go Kyber library","requires_auth":"none","summary":"Timing side-channel in crystals-go allows attackers to recover secret keys by timing decapsulation of forged ciphertexts.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"### Impact\nOn some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.\n\n### Patches\nPatched in https://github.com/kudelskisecurity/crystals-go/pull/21\n\n### Note\nThis library was written as part of a MsC student project in the Cybersecurity Team at Kudelski Security. It is not actively maintained anymore. It is only intended for research and testing. We discourage its use in any production environment. Kudelski Security does not use this library as part of their commercial offers or product. This has now been clarified on the project's README.\n\n### References\nhttps://groups.google.com/a/list.nist.gov/g/pqc-forum/c/ldX0ThYJuBo\nhttp://kyberslash.cr.yp.to/","ecosystems":["Go"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":true,"headline":"crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)","id":"GHSA-f6jh-hvg2-9525","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":"Go","product":null,"products":[],"type":"information_disclosure","year":"2024"},"n_packages":3,"n_references":null,"packages":[{"ecosystem":"Go","fixed":["0.0.0-20240116172146-2a6ca2d4e64d"],"introduced":["0"],"last_affected":[],"package":"github.com/kudelskisecurity/crystals-go","purl":null,"source":"GHSA-f6jh-hvg2-9525"},{"ecosystem":"Go","fixed":["0.0.0-20240116172146-2a6ca2d4e64d"],"introduced":["0"],"last_affected":[],"package":"github.com/kudelskisecurity/crystals-go","purl":"pkg:golang/github.com/kudelskisecurity/crystals-go","source":"GHSA-f6jh-hvg2-9525"},{"ecosystem":"Go","fixed":["0.0.0-20240116172146-2a6ca2d4e64d"],"introduced":["0"],"last_affected":[],"package":"github.com/kudelskisecurity/crystals-go","purl":"pkg:golang/github.com/kudelskisecurity/crystals-go","source":"GO-2024-2469"}],"products":null,"published":"2024-01-17","related":[],"sources":[{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"Timing side-channel in crystals-go allows attackers to recover secret keys by timing decapsulation of forged ciphertexts.","url":"https://insights.sbomify.com/GHSA-f6jh-hvg2-9525/"}