Vulnerability nyob rau hauv kev siv ntawm post-quantum encryption algorithm Kyber

Hauv kev ua raws li Kyber encryption algorithm, uas yeej qhov kev sib tw ntawm cryptographic algorithms resistant rau brute quab yuam ntawm lub computer quantum, muaj qhov tsis zoo tau pom tias tso cai rau sab-channel tawm tsam rov tsim cov yuam sij zais cia raws li ntsuas lub sijhawm ua haujlwm thaum lub sijhawm decryption ntawm lub ciphertext muab los ntawm tus neeg tawm tsam. Qhov teeb meem cuam tshuam rau ob qho tib si kev siv ntawm CRYSTALS-Kyber KEM qhov tseem ceeb encapsulation mechanism thiab ntau lub tsev qiv ntawv thib peb Kyber-enabled encryption, suav nrog cov tsev qiv ntawv pqcrypto siv nyob rau hauv Cov Neeg xa xov liaison.

Lub ntsiab lus ntawm qhov tsis zoo, uas tau txais lub npe code KyberSlash, yog nyob rau hauv kev siv kev faib ua haujlwm "t = (((t < 1) + KYBER_Q / 2) / KYBER_Q) & 1; "nyob rau hauv tus txheej txheem ntawm kev txiav txim siab cov lus , nyob rau hauv uas cov nyiaj faib muaj tus nqi zais cia "t" nrog hom "ob npaug", thiab tus divisor yog qhov paub zoo rau pej xeem tus nqi KYBER_Q. Qhov teeb meem yog tias lub sijhawm ntawm kev faib ua haujlwm tsis tas mus li, thiab nyob rau hauv ib puag ncig sib txawv tus naj npawb ntawm CPU cycles ua rau kev faib yog nyob ntawm cov ntaub ntawv nkag. Yog li, raws li kev hloov pauv ntawm lub sijhawm ua haujlwm, ib tus tuaj yeem tau txais lub tswv yim ntawm qhov xwm txheej ntawm cov ntaub ntawv siv los faib.

Daniel J. Bernstein, tus kws tshaj lij hauv kev lag luam cryptography, muaj peev xwm npaj ua haujlwm ua qauv qhia txog cov pov thawj tias qhov kev tawm tsam tuaj yeem ua tiav hauv kev xyaum. Hauv ob ntawm peb qhov kev sim ua, thaum khiav cov cai ntawm Raspberry Pi 2 lub rooj tsavxwm, nws muaj peev xwm rov tsim dua Kyber-512 tus yuam sij ntiag tug raws li ntsuas cov ntaub ntawv txiav txim lub sijhawm. Cov txheej txheem kuj tuaj yeem hloov kho rau Kyber-768 thiab Kyber-1024 yuam sij. Txhawm rau ua tiav qhov kev tawm tsam, nws yog qhov tsim nyog uas cov ntawv ciphertext tau teev tseg los ntawm tus neeg tawm tsam yuav tsum tau ua tiav siv tib khub tseem ceeb thiab tias lub sijhawm ua haujlwm ntawm kev ua haujlwm tuaj yeem ntsuas qhov tseeb.

Lwm qhov xau (KyberSlash2) tau raug txheeb xyuas hauv qee lub tsev qiv ntawv, uas kuj tshwm sim vim yog siv tus nqi zais cia thaum ua haujlwm faib. Qhov sib txawv ntawm thawj qhov kev xaiv los ntawm kev hu rau ntawm theem encryption (hauv poly_compress thiab polyvec_compress functions), thiab tsis yog thaum lub sij hawm decryption. Txawm li cas los xij, qhov kev xaiv thib ob yuav muaj txiaj ntsig zoo rau kev tawm tsam tsuas yog nyob rau hauv cov xwm txheej uas cov txheej txheem siv rov ua haujlwm encryption nyob rau hauv uas cov zis ntawm cov ntawv ciphertext suav tias yog tsis pub lwm tus paub.

Qhov tsis zoo twb tau kho nyob rau hauv cov tsev qiv ntawv:

  • zig/lib/std/crypto/kyber_d00.zig (Lub Kaum Ob Hlis 22),
  • pq-crystals/kyber/ref (Lub Kaum Ob Hlis 30),
  • symbolicsoft/kyber-k2so (Lub Kaum Ob Hlis 19),
  • cloudflare/circl (Lub Ib Hlis 8),
  • aws/aws-lc/crypto/kyber (January 4),
  • liboqs/src/kem/kyber (8 January).

Cov tsev qiv ntawv tsis pib cuam tshuam los ntawm qhov tsis zoo:

  • boringssl/crypto/kyber,
  • filippo.io/mlkem768, ib
  • formosa-crypto/libjade/tree/main/src/crypto_kem,
  • kyber/common/amd64/avx2,
  • formosa-crypto/libjade/tree/main/src/crypto_kem/kyber/common/amd64/ref,
  • pq-crystals/kyber/avx2,
  • pqclean/crypto_kem/kyber*/avx2.

Qhov tsis zoo no tseem tsis tau kho nyob rau hauv cov tsev qiv ntawv:

  • antontutoveanu/crystals-kyber-javascript,
  • Argyle-Software/kyber,
  • debian/src/liboqs/unstable/src/kem/kyber,
  • kudelskisecurity/crystals-mus,
  • mupq/pqm4/crypto_kem/kyber* (Lub Kaum Ob Hlis 20, tsuas yog 1 version ntawm qhov tsis zoo tau kho),
  • PQClean/PQClean/crypto_kem/kyber*/aarch64,
  • PQClean/PQClean/crypto_kem/kyber*/clean,
  • randombit / botan (Lub Kaum Ob Hlis 20, tsuas yog 1 qhov yooj yim raug kho),
  • rustpq/pqcrypto/pqcrypto-kyber (kev txhim kho tau ntxiv rau libsignal thaum Lub Ib Hlis 5, tab sis qhov tsis zoo tseem tsis tau kho hauv pqcrypto-kyber nws tus kheej).

Tau qhov twg los: opennet.ru

Ntxiv ib saib