GHSA-f6jh-hvg2-9525
crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)
GHSA-f6jh-hvg2-9525 is a vulnerability with no CVSS score yet in github.com/kudelskisecurity/crystals-go, published January 17, 2024. No source lists public exploit code. Fixed in github.com/kudelskisecurity/crystals-go 0.0.0-20240116172146-2a6ca2d4e64d.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.0.0-20240116172146-2a6ca2d4e64dgithub.com/kudelskisecurity/crystals-go
Description
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Patches
Patched in https://github.com/kudelskisecurity/crystals-go/pull/21
Note
This library was written as part of a MsC student project in the Cybersecurity Team at Kudelski Security. It is not actively maintained anymore. It is only intended for research and testing. We discourage its use in any production environment. Kudelski Security does not use this library as part of their commercial offers or product. This has now been clarified on the project's README.
References
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/ldX0ThYJuBo http://kyberslash.cr.yp.to/
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/kudelskisecurity/crystals-goGo | before 0.0.0-20240116172146-2a6ca2d4e64d | 0.0.0-20240116172146-2a6ca2d4e64d |
What each source reports
GitHub AdvisoriesNo score
crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Patches
Patched in https://github.com/kudelskisecurity/crystals-go/pull/21
Note
This library was written as part of a MsC student project in the Cybersecurity Team at Kudelski Security. It is not actively maintained anymore. It is only intended for research and testing. We discourage its use in any production environment. Kudelski Security does not use this library as part of their commercial offers or product. This has now been clarified on the project's README.
References
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/ldX0ThYJuBo http://kyberslash.cr.yp.to/
- Record
GHSA-f6jh-hvg2-9525- Updated
- 2026-11-02
OSVNo score
crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)
Impact
On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.
Patches
Patched in https://github.com/kudelskisecurity/crystals-go/pull/21
Note
This library was written as part of a MsC student project in the Cybersecurity Team at Kudelski Security. It is not actively maintained anymore. It is only intended for research and testing. We discourage its use in any production environment. Kudelski Security does not use this library as part of their commercial offers or product. This has now been clarified on the project's README.
References
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/ldX0ThYJuBo http://kyberslash.cr.yp.to/
- Record
GHSA-f6jh-hvg2-9525- Updated
- 2026-11-02
OSVGO-2024-2469No score
Kyberslash timing attack possible in github.com/kudelskisecurity/crystals-go
Kyberslash timing attack possible in github.com/kudelskisecurity/crystals-go
- Record
GO-2024-2469- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525
kyberslash.cr.yp.to/faq