DirectorySecurity Advisories
Sign In
Security Advisories

CGA-m893-7q49-8cvp

Published

Last updated

https://images.chainguard.dev/security/CGA-m893-7q49-8cvp
Package

kyverno-1.8

Latest Update
Under investigation
Aliases
  • GHSA-9763-4f94-gfch

Summary

CIRCL's Kyber: timing side-channel (kyberslash2)

Description

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

  • kyberslash.cr.yp.to

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images