kyber vulnerabilities

1 known vulnerability in kyber from Pq-crystals. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  kyber: Observable Discrepancy

  CVE-2024-37880Jun 10, 2024Pq-crystals

  The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because poly_frommsg