High · 7.5 CVE-2023-24025 EUVD-2023-28089GHSA-xrr5-3hrr-35jx

CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital sign…

Published Jan 20, 2023 · Updated Apr 2, 2025 · Assigned by mitre

Description

CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector.

References

https://github.com/PQClean/PQClean/tree/d03da3053491e767ef842deaef43fc5bdb6bc911
https://csrc.nist.gov/Projects/post-quantum-cryptography/selected-algorithms-2022
https://eprint.iacr.org/2023/050