Skip to content
OpenAdvisories

Package · Go

github.com/kudelskisecurity/crystals-go

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-f6jh-hvg2-9525

    crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)

    ### Impact On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key. ### Patches Patched in https://github.com/kudelskisecurity/crystals-go/pull/21 ### Note This library wa…

    github.com/kudelskisecurity/crystals-go Go