Kusagadzikana kwakawanikwa mukuitwa kweKyber encryption algorithm, muhwina weQuantum Computer Resistant Cryptographic Algorithm Competition, inobvumira kurwiswa kwepadivi-chiteshi kuvakazve makiyi akavanzika nekuyera nguva dzekutengeserana panguva yekudhipfenyurwa kweciphertext yakapihwa neanorwisa. Nyaya yacho inobata zvese kutariswa kwekuita kweCRYSTALS-Kyber KEM kiyi yekuvharisa michina uye akawanda echitatu-bato encryption maraibhurari anotsigira Kyber, kusanganisira pqcrypto raibhurari inoshandiswa muSigina messenger.
Kusagadzikana, codenamed KyberSlash, inosanganisira kushandiswa kwekuparadzanisa kushanda "t = (((t <1) + KYBER_Q/2)/KYBER_Q) & 1;" panguva yekunyora meseji, uko dividendi ine yakavanzika kukosha "t" ye "mbiri" mhando, uye divisor ndiyo inonyanya kuzivikanwa kukosha kweveruzhinji KYBER_Q. Dambudziko nderekuti nguva yekupatsanurwa haisi nguva dzose, uye munzvimbo dzakasiyana, huwandu hweCPU mitsetse inoitirwa kupatsanura zvinoenderana nedata rekuisa. Naizvozvo, zvichibva pakusiyana kwenguva yekushanda, munhu anogona kuwana nzwisiso yemhando yedata rinoshandiswa kupatsanura.
Daniel J. Bernstein, nyanzvi ine mukurumbira pakunyora mashoko, akabudirira kugadzira chiratidzo chinoshanda chechiratidzo chekurwisa. Mune zviviri zvezvitatu zviedzo zvakaitwa paRaspberry Pi 2 bhodhi, akakwanisa kugadzira patsva Kyber-512 yakavanzika kiyi zvichibva pane data decoding nguva kuyerwa. Iyo nzira inogona zvakare kuchinjirwa kuKyber-768 uye Kyber-1024 makiyi. Kuti kurwiswa kubudirire, ciphertext yaunzwa neanorwisa inofanirwa kugadziriswa pachishandiswa makiyi maviri akafanana uye nguva yekuvhiya inofanirwa kuyerwa nemazvo.
Kumwe kuvuza (KyberSlash2) kwakawanikwa mune mamwe maraibhurari, iyo inoitikawo nekuda kwekushandiswa kweyakavanzika kukosha pakuita kupatsanura. Musiyano kubva kumutsauko wekutanga ndewekuti unodaidzwa panguva yekunyorera nhanho (mu poly_compress uye polyvec_compress mabasa) pane panguva yekudhirowa. Uyezve, musiyano wechipiri unogona kurwiswa chete kana maitirwo acho achinge ashandiswa mukuita zvekare encryption, uko kuburitswa kweciphertext kunoonekwa sekwakavanzika.
Kusagadzikana kwakatogadziriswa mumaraibhurari:
- zig/lib/std/crypto/kyber_d00.zig (Zvita 22),
- pq-crystals/kyber/ref (Zvita 30),
- symbolicsoft/kyber-k2so (Zvita 19),
- Cloudflare/circl (Ndira 8),
- aws/aws-lc/crypto/kyber (Ndira 4),
- liboqs/src/kem/kyber (8 Ndira).
Maraibhurari asina njodzi pakutanga:
- boringssl/crypto/kyber,
- filippo.io/mlkem768,
- formosa-crypto/libjade/tree/main/src/crypto_kem,
- kyber/common/amd64/avx2,
- formosa-crypto/libjade/tree/main/src/crypto_kem/kyber/common/amd64/ref,
- pq-crystals/kyber/avx2,
- pqclean/crypto_kem/kyber*/avx2.
Kusagadzikana kunoramba kusina kunyorwa mumaraibhurari:
- antontutoveanu/crystals-kyber-javascript,
- Argyle-Software/kyber,
- debian/src/liboqs/unstrong/src/kem/kyber,
- kudelskisecurity/crystals-go,
- mupq/pqm4/crypto_kem/kyber* (1 chete musiyano wekusagadzikana wakagadziriswa musi wa20 Zvita),
- PQClean/PQClean/crypto_kem/kyber*/aarch64,
- PQClean/PQClean/crypto_kem/kyber*/clean,
- randombit/botan (chete 1 vulnerability musiyano wakagadziriswa musi wa20 Zvita),
- rustpq/pqcrypto/pqcrypto-kyber (musi wa5 Ndira, kugadzirisa kwakawedzerwa kune libsignal, asi kusagadzikana hakusati kwagadziriswa mupqcrypto-kyber pachayo).
Source: opennet.ru
