3 results · Feed
-
Unscored —
pqc_kyber is unmaintained
The crate has had no releases since 0.7.1 (2023-08-23), and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend (Argyle-Software/kyber#121), have gone unanswer…
-
High 7.4
pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery
## Summary When `pqc_kyber` is built with the opt-in `avx2` feature on x86_64, its constant-time conditional-move routine `cmov` is a no-op: it never performs the copy. That `cmov` is exactly the step that applies the Fujisaki-Okamoto (FO) implicit rejection …
-
High 7.4
pqc_kyber KyberSlash: division timings depending on secrets
Various Kyber software libraries in various environments leak secret information into timing, specifically because * these libraries include a line of code that divides a secret numerator by a public denominator, * the number of CPU cycles for division in var…