Skip to content
OpenAdvisories

Package · PyPI

pypqc

2 known vulnerabilities.

2 results · Feed

  • High 8.2

    Observable Timing Discrepancy in pypqc

    ### Impact `kyber512`, `kyber768`, and `kyber1024` on Mac OS \(or when compiled with clang\) only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the p…

  • High 8.2

    pypqc private key retrieval vulnerability

    ### Impact `kyber512`, `kyber768`, and `kyber1024` only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exist…