216.73.216.172

CVE-2024-37880

· Published 10/06/2024 02:15 · Modified 10/06/2024 02:52

Labels: CVE-2024-37880 2024-06-10CVE-2024-37880[email protected]

Essential information

Published
10/06/2024 02:15
Modified
10/06/2024 02:52
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because poly_frommsg in poly.c does not prevent Clang from emitting a vulnerable secret-dependent branch.

NVD status

Status
Awaiting Analysis — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source
[email protected]
NVD
View on NVD

References