GHSA-hrjv-pf36-jpmr
oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
GHSA-hrjv-pf36-jpmr is a vulnerability with no CVSS score yet in oqs, published July 30, 2022. No source lists public exploit code. Fixed in oqs 0.7.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.7.2oqs +1 more
Description
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2.
An efficient key recovery attack on SIDH (preliminary version)
Affected packages
What each source reports
GitHub AdvisoriesNo score
oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2.
An efficient key recovery attack on SIDH (preliminary version)
- Record
GHSA-hrjv-pf36-jpmr- Updated
- 2026-11-02
OSVNo score
oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2.
An efficient key recovery attack on SIDH (preliminary version)
- Record
GHSA-hrjv-pf36-jpmr- Updated
- 2026-11-02
OSVRUSTSEC-2022-0045No score
Post-Quantum Key Encapsulation Mechanism SIKE broken
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2.
The affected schemes are the oqs::kem::Algorithm::Sike* and oqs::kem::Algorithm::Sidh* enum variants.
An efficient key recovery attack on SIDH (preliminary version)
- Record
RUSTSEC-2022-0045- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.