HIGH

GHSA-9763-4f94-gfch

CIRCL's Kyber: timing side-channel (kyberslash2)

Quick fix

GHSA-9763-4f94-gfch — github.com/cloudflare/circl: upgrade to the fixed version with the command below.

go get github.com/cloudflare/circl@v1.3.7

Details

### Impact On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

### Patches Patched in 1.3.7.

### References - [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cloudflare/circl

Introduced in: 0Fixed in: 1.3.7

Fixgo get github.com/cloudflare/circl@v1.3.7

References

https://github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch[WEB]
https://github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d[WEB]
https://github.com/cloudflare/circl[PACKAGE]
https://kyberslash.cr.yp.to[WEB]