GHSA-hrjv-pf36-jpmr Post-Quantum Key Encapsulation Mechanism SIKE broken
Attackers can recover secret keys from SIKE/SIDH implementations, compromising encrypted data confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-hrjv-pf36-jpmr?
GHSA-hrjv-pf36-jpmr is a vulnerability in oqs, published on 30 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2.
The affected schemes are the oqs::kem::Algorithm::Sike* and oqs::kem::Algorithm::Sidh* enum variants.
An efficient key recovery attack on SIDH (preliminary version)
Which versions are affected by GHSA-hrjv-pf36-jpmr?
3 open source packages ship an affected version, including oqs.
| Package | Affected | Fixed in |
|---|---|---|
oqs crates.io | All versions | 0.7.2 |
oqs crates.io | All versions | 0.7.2 |
oqs crates.io | From 0.0.0-0 | 0.7.2 |
How do I fix GHSA-hrjv-pf36-jpmr?
Upgrade oqs to 0.7.2 or later.
Is GHSA-hrjv-pf36-jpmr being exploited?
There is no known exploitation of GHSA-hrjv-pf36-jpmr in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2022-0045.