CIRCL's Kyber: timing side-channel (kyberslash2). ### Impact On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Does not apply to ephemeral usage, such as when used in the regular way in TLS.
Patched in 1.3.7.
Advisories are based on vulnerability information provided by Grype from Anchore.
Products
Chainguard Images© 2024 Chainguard, Inc.
