DirectorySecurity Advisories
Sign In
Security Advisories

CGA-2vj3-vm72-mhw9

Published

Last updated

https://images.chainguard.dev/security/CGA-2vj3-vm72-mhw9
Package

keda

Latest Update
Under investigation
Aliases
  • GHSA-9763-4f94-gfch

Summary

CIRCL's Kyber: timing side-channel (kyberslash2)

Description

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

  • kyberslash.cr.yp.to

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images