Ho na le bofokoli bo fumanoeng ts'ebetsong ea algorithm ea Kyber encryption, e ileng ea hlōla tlhōlisano ea li-algorithms tsa "quantum-resistant cryptographic", tse lumellang litlhaselo tsa mahlakoreng ho tsosolosa linotlolo tsa lekunutu tse thehiloeng ho lekanya nako ea ts'ebetso nakong ea ho hlakoloa ha mongolo o fanoeng ke mohlaseli. Taba ena e ama bobeli ts'ebetsong ea litšupiso tsa mochini oa senotlolo oa CRYSTALS-Kyber KEM le lilaebrari tse ngata tsa mokha oa boraro tse tšehetsang Kyber, ho kenyeletsoa laeborari ea pqcrypto e sebelisoang ho lenģosa la Signal.
Kotsi, e bitsoang KyberSlash, e ipapisitse le ts'ebeliso ea ts'ebetso ea karohano "t = (((t <1) + KYBER_Q/2)/KYBER_Q) & 1;" ts'ebetsong ea ho khetholla molaetsa, moo karohano e nang le boleng ba lekunutu "t" ba mofuta oa "habeli", 'me karohano ke boleng bo tsebahalang ba sechaba KYBER_Q. Bothata ke hore nako ea ts'ebetso ea karohano ha e fetohe, 'me libakeng tse fapaneng palo ea lipotoloho tsa CPU tse etsoang bakeng sa karohano e ipapisitse le data e kentsoeng. Kahoo, ho itšetlehile ka phetoho ea nako ea ts'ebetso, motho a ka fumana maikutlo a mofuta oa data e sebelisetsoang karohano.
Daniel J. Bernstein, setsebi se tummeng sa ho ngola li-cryptography, o hlahisitse pontšo e sebetsang ea bopaki ba maikutlo a tlhaselo eo. Litekong tse peli ho tse tharo, khoutu e ile ea tsamaisoa ho Raspberry Pi 2 mme ea khona ho etsa senotlolo sa lekunutu sa Kyber-512 ka botlalo ho latela nako ea ho etsa decoding. Mokhoa o ka boela oa fetoloa bakeng sa linotlolo tsa Kyber-768 le Kyber-1024. E le hore tlhaselo e atlehe, ciphertext e fanoeng ke mohlaseli e tlameha ho sebetsoa ho sebelisoa li-key pair tse tšoanang le nako ea ho bolaoa e ka lekanngoa ka nepo.
Leak e 'ngoe (KyberSlash2) e fumanoe lilaebraring tse ling, tse hlahang hape ka lebaka la tšebeliso ea boleng ba sephiri ha ho etsoa karohano. Phapang ho tloha mofuteng oa pele ke hore e bitsoa sethaleng sa encryption (ka poly_compress le polyvec_compress mesebetsi), eseng nakong ea decryption. Leha ho le joalo, mofuta oa bobeli o ka ba molemo bakeng sa tlhaselo feela maemong ao mokhoa ona o sebelisoang ts'ebetsong ea ho ngolisa hape, moo tlhahiso ea mongolo o patiloeng e nkuoang e le lekunutu.
Kotsi e se e lokisitsoe lilaebraring:
- zig/lib/std/crypto/kyber_d00.zig (La 22 Tšitoe),
- pq-crystals/kyber/ref (la 30 Tšitoe),
- symbolicsoft/kyber-k2so (December 19),
- cloudflare/circl (la 8 Pherekhong),
- aws/aws-lc/crypto/kyber (Pherekhong 4),
- liboqs/src/kem/kyber (8 Pherekgong).
Lilaebrari tse seng kotsing qalong:
- boringssl/crypto/kyber,
- filippo.io/mlkem768,
- formosa-crypto/libjade/tree/main/src/crypto_kem,
- kyber/common/amd64/avx2,
- formosa-crypto/libjade/tree/main/src/crypto_kem/kyber/common/amd64/ref,
- pq-crystals/kyber/avx2,
- pqclean/crypto_kem/kyber*/avx2.
Kotsi e ntse e sa tsejoe lilaebraring:
- antontutoveanu/crystals-kyber-javascript,
- Argyle-Software/kyber,
- debian/src/liboqs/unstable/src/kem/kyber,
- kudelskisecurity/crystals-go,
- mupq/pqm4/crypto_kem/kyber* (mofuta o le mong feela oa tlokotsi o kentsoeng ka la 20 Tšitoe),
- PQClean/PQClean/crypto_kem/kyber*/aarch64,
- PQClean/PQClean/crypto_kem/kyber*/clean,
- randombit/botan (mofuta o le mong feela oa ts'okelo o kentsoeng ka la 20 Tšitoe),
- rustpq/pqcrypto/pqcrypto-kyber (ka la 5 Pherekhong, tokiso e ile ea eketsoa ho libsignal, empa ts'oaetso ha e so lokisoe ho pqcrypto-kyber ka boeona).
Source: opennet.ru
