KyberSlash: Time-Channel Side-Channel Vulnerability Analysis in Kyber

Vulnerability Overview KyberSlash is a timing side-channel vulnerability in the division operations of the Kyber software. This vulnerability exploits the characteristic that the number of CPU cycles for division operations in the Kyber software library varies depending on the input, allowing secret information to be inferred through execution time measurements. Scope of Impact Affected Libraries: Multiple Kyber software libraries are affected by this issue. Specific Manifestation: These libraries contain a line of code that divides a secret numerator by a public denominator. The number of CPU cycles required for the division operation varies based on the input, leading to timing differences. Potential Risk: This timing difference can be exploited to extract secret information. Mitigation Tracking Issues: The KyberSlash webpage tracks which Kyber libraries are affected by this issue. FAQ: A Frequently Asked Questions page is provided regarding this issue. Exploit Demonstration: Demos are provided to show that KyberSlash can sometimes be exploited. Publication: A related paper is published on KyberSlash. Contributors Daniel J. Bernstein (University of Illinois at Chicago, Academia Sinica, Taiwan) Karthikeyan Bhargavan (Inria, Cryspen) Shivam Bhasin (Temasek Labs, Nanyang Technological University Singapore) Anupam Chattopadhyay (Nanyang Technological University Singapore) Tee Kiah Chia (Temasek Labs, Nanyang Technological University Singapore) Matthias J. Kannwischer (Centre for Quantum Safe Migration, Chelpis Quantum Tech, Taiwan) Franziskus Kiefer (Cryspen) Thales Paiva (University of São Paulo, Fundep, CASNAV) Prasanna Ravi (Temasek Labs, Nanyang Technological University Singapore) Goutam Tamvada (Cryspen) URLs Permanent Link: https://kyberslash.cr.yp.to Backup Link: http://kyberslash.cr.yp.to (for older browsers that do not support HTTPS) Version Information Current Version: "Introduction" page as of 2024.06.24 Code Block No POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

KyberSlash: Time-Channel Side-Channel Vulnerability Analysis in Kyber