Timing Side-Channel Attack

pypqc is vulnerable to a timing side-channel attack. The vulnerability is due to the attacker's ability to submit numerous decapsulation requests against a single private key and gain timing information, allowing the recovery of the private key with the Kyber512, Kyber768, and Kyber1024 functions...

Observable Timing Discrepancy in pypqc

Impact kyber512, kyber768, and kyber1024 on Mac OS \or when compiled with clang\ only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a...

pqbit (>=1.0.0 <=1.4.0), quantumguard (>=0.1.0 <=0.1.1) potentially affected by unknown CVE via pypqc (=0.0.6.2)

pypqc PYPI version =0.0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypqc and may be impacted: - pqbit =1.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-HVH4-5QR6-3V7R...

Chosen-Ciphertext Attack (KyberSlash)

pypqc vulnerable to a chosen-ciphertext attack. The vulnerability is caused by to an attacker submitting numerous ciphertexts for decryption and observing the response, potentially allowing them to recover the private key...

pypqc private key retrieval vulnerability

Impact kyber512, kyber768, and kyber1024 only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a local attacker...

GHSA-RC4P-P3J9-6577 pypqc private key retrieval vulnerability

Impact kyber512, kyber768, and kyber1024 only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a local attacker...

PT-2024-40455 · Pypqc · Pypqc

Name of the Vulnerable Software and Affected Versions: PyPQC versions prior to 0.0.6.1 Description: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. A proof-of-concept exploi...