Lucene search

[email protected]NVD:CVE-2024-37880

HistoryJun 10, 2024 - 2:15 a.m.

CVE-2024-37880

2024-06-1002:15:47

CWE-203

[email protected]

web.nvd.nist.gov

kyber

reference implementation

timing side channel

vulnerability

llvm clang

optimization options

ml-kem 512

secret key

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

27.2%

JSON

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because poly_frommsg in poly.c does not prevent Clang from emitting a vulnerable secret-dependent branch.

Affected configurations

NVD

Node

pq-crystalskyberRange<2024-06-03

References

github.com/antoonpurnal/clangover

github.com/pq-crystals/kyber/commit/9b8d30698a3e7449aeb34e62339d4176f11e3c6c

news.ycombinator.com/item?id=40577486

pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity/

twitter.com/purnaltoon/status/1797644696568959476

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

27.2%

JSON

Related for NVD:CVE-2024-37880

cvelist1 cve1 osv1