GHSA-p4v8-jgcv-9g75 safe_pqc_kyber leaks parts of secret keys
Attackers can recover secret keys via timing attacks on decapsulation in the safe_pqc_kyber Rust library, compromising cryptographic security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-p4v8-jgcv-9g75?
GHSA-p4v8-jgcv-9g75 is a vulnerability in safe_pqc_kyber, published on 3 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Impact
On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patches
Patched in 0.6.2.
References
Which versions are affected by GHSA-p4v8-jgcv-9g75?
2 open source packages ship an affected version, including safe_pqc_kyber.
| Package | Affected | Fixed in |
|---|---|---|
safe_pqc_kyber crates.io | All versions | 0.6.2 |
safe_pqc_kyber crates.io | All versions | 0.6.2 |
How do I fix GHSA-p4v8-jgcv-9g75?
Upgrade safe_pqc_kyber to 0.6.2 or later.
Is GHSA-p4v8-jgcv-9g75 being exploited?
There is no known exploitation of GHSA-p4v8-jgcv-9g75 in the wild and no public exploit code.