DirectorySecurity Advisories
Sign In
Security Advisories

CGA-27m7-5cxx-r98c

Published

Last updated

https://images.chainguard.dev/security/CGA-27m7-5cxx-r98c
Package

gomplate

Latest Update
Under investigation
Aliases
  • GHSA-9763-4f94-gfch

Summary

CIRCL's Kyber: timing side-channel (kyberslash2)

Description

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

  • kyberslash.cr.yp.to

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images