HIGH

GHSA-h864-m8vm-3xvj

oqs's Post-Quantum Signature scheme Rainbow level I parametersets broken

Details

Ward Beullens found a practical key-recovery attack against Rainbow. The level I parametersets are removed from liboqs starting from version `0.7.2`. Find the scientific details in [Breaking Rainbow Takes a Weekend on a Laptop](https://eprint.iacr.org/2022/214).

This means all the `oqs::sig::Algorithm::RainbowI*` variants are insecure.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/oqs

Introduced in: 0Fixed in: 0.7.2

Upgrade oqs to 0.7.2 or newer (ecosystem crates.io).

References

https://github.com/open-quantum-safe/liboqs-rust[PACKAGE]
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/KFgw5_qCXiI?pli=1[WEB]
https://rustsec.org/advisories/RUSTSEC-2022-0047.html[WEB]