GMS-2024-5: CIRCL's Kyber: timing side-channel (kyberslash2)

January 8, 2024

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

kyberslash.cr.yp.to

References

github.com/advisories/GHSA-9763-4f94-gfch
github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d
github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch
kyberslash.cr.yp.to/

Code Behaviors & Features

Detect and mitigate GMS-2024-5 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →