TI-2023-01625 CVE-2023-1732 · GHSA-2q89-485c-9j2x
Improper random reading in CIRCL
Priority LOW 36
When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error.
No Cloudflare vulnerabilities are listed in CISA KEV.
2 records in Circl · all components
When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error.
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.