Spencer Wilson

3 exploits Active since Dec 2024
CVE-2024-54137 WRITEUP HIGH WRITEUP
liboqs < 0.12.0 - Exposure of Sensitive Information via HQC Key Encapsulation Indexing Error
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is incorrectly treated as non-secret data. This results in an incorrect shared secret value being returned when the decapsulation function is called with a malformed ciphertext. This vulnerability is fixed in 0.12.0.
CVSS 7.4
CVE-2025-48946 WRITEUP LOW WRITEUP
liboqs < 0.13.0 - Use of a Broken or Risky Cryptographic Algorithm in HQC Implementation
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the HQC algorithm, an algorithm with a theoretical design flaw which leads to large numbers of malformed ciphertexts sharing the same implicit rejection value. Currently, no concrete attack on the algorithm is known. However, prospective users of HQC must take extra care when using the algorithm in protocols involving key derivation. In particular, HQC does not provide the same security guarantees as Kyber or ML-KEM. There is currently no patch for the HQC flaw available in liboqs, so HQC is disabled by default in liboqs starting from version 0.13.0. OQS will update its implementation after the HQC team releases an updated algorithm specification.
CVSS 3.7
CVE-2025-52473 WRITEUP MEDIUM WRITEUP
liboqs < 0.14.0 - Exposure of Sensitive Information via Secret-Dependent Branches in HQC Key Encapsulation
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0.
CVSS 5.9