Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47418
HistoryJun 07, 2024 - 9:01 a.m.

Timing Side-Channel Attack

2024-06-0709:01:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
pypqc
vulnerability
side-channel
attack
timing
key recovery
kyber512
kyber768
kyber1024
software

7.2 High

AI Score

Confidence

High

pypqc is vulnerable to a timing side-channel attack. The vulnerability is due to the attacker’s ability to submit numerous decapsulation requests against a single private key and gain timing information, allowing the recovery of the private key with the Kyber512, Kyber768, and Kyber1024 functions.

7.2 High

AI Score

Confidence

High