CVE-2024-0117: Timing Attack in Crystals-Go

The core of this vulnerability lies in the implementation of Kyberslash, a post-quantum key encapsulation mechanism. The timing attack exploits subtle variations in execution time based on the secret key being used. An attacker can repeatedly initiate Kyberslash operations, measuring the time taken for each. By analyzing these timing differences, they can statistically infer information about the secret key. The impact is significant: successful key extraction grants the attacker the ability to decrypt previously encrypted data and potentially forge new encrypted communications. This could compromise the confidentiality and integrity of systems relying on Crystals-Go for cryptographic protection. While the attack requires careful measurement and statistical analysis, the potential for key compromise makes this a high-priority vulnerability to address.

1. Reserved2023-12-02
2. Published2024-10-26
3. Modified2024-11-01
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-0117 is to immediately upgrade to version 0.0.0-20240116172146-2a6ca2d4e64d or later. This patched version includes countermeasures to prevent the timing leak. If an immediate upgrade is not feasible due to compatibility issues or system downtime constraints, consider implementing temporary workarounds. While no perfect workaround exists, careful code review and potentially adding random delays to cryptographic operations might obscure the timing variations, but this is not a substitute for patching. Monitor your systems for unusual timing patterns that could indicate an active attack. After upgrading, confirm the fix by running a series of Kyberslash operations and verifying that the execution times are consistent and do not reveal any timing-based information.