From 0c07fa8badbf44f67d3ff1571df31ca54e5228c0 Mon Sep 17 00:00:00 2001 From: Thom Wiggers Date: Wed, 11 Dec 2024 17:12:06 +0100 Subject: [PATCH] fix security flaw in hqc --- CHANGELOG.md | 3 +++ implementations.yaml | 4 ++-- pqclean | 2 +- pqcrypto-hqc/Cargo.toml | 2 +- pqcrypto/Cargo.toml | 4 ++-- 5 files changed, 9 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9406914..e758bf2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,8 @@ # Changelog +## 2024-12-11 +* `pqcrypto-hqc` was updated to addresss a security flaw in decapsulation. + ## 2024-10-24 * `pqcrypto-kyber` and `pqcrypto-dilithium` are retired and replaced by `pqcrypto-mlkem` and `pqcrypto-mldsa`, respectively. * `pqcrypto-falcon` now separates Falcon into the "compressed" mode and the "padded" variants. The "compressed" variant likely produces shorter signatures than the max size. diff --git a/implementations.yaml b/implementations.yaml index 2342897..fa7433d 100644 --- a/implementations.yaml +++ b/implementations.yaml @@ -1,6 +1,6 @@ --- -pqcrypto_version: 0.18.0 +pqcrypto_version: 0.18.1 traits_version: 0.3.5 kems: @@ -50,7 +50,7 @@ kems: implementations: [clean, avx2] doctest: no hqc: - version: 0.2.0 + version: 0.2.1 implementations: [clean] schemes: - name: hqc-128 diff --git a/pqclean b/pqclean index c3e6861..1eacfda 160000 --- a/pqclean +++ b/pqclean @@ -1 +1 @@ -Subproject commit c3e6861fbb0a0b2721d2599c0a68430061414f18 +Subproject commit 1eacfdafc15ddc5d5759d0b85b4cef26627df181 diff --git a/pqcrypto-hqc/Cargo.toml b/pqcrypto-hqc/Cargo.toml index bb7679b..dfb0609 100644 --- a/pqcrypto-hqc/Cargo.toml +++ b/pqcrypto-hqc/Cargo.toml @@ -2,7 +2,7 @@ name = "pqcrypto-hqc" description = "Post-Quantum Key-Encapsulation Mechanism hqc" readme = "README.md" -version = "0.2.0" +version = "0.2.1" authors = ["Thom Wiggers "] edition = "2021" license = "MIT OR Apache-2.0" diff --git a/pqcrypto/Cargo.toml b/pqcrypto/Cargo.toml index 902d25e..a252211 100644 --- a/pqcrypto/Cargo.toml +++ b/pqcrypto/Cargo.toml @@ -2,7 +2,7 @@ name = "pqcrypto" description = "Post-Quantum cryptographic primitives" readme = "README.md" -version = "0.18.0" +version = "0.18.1" authors = ["Thom Wiggers "] edition = "2021" license = "MIT OR Apache-2.0" @@ -15,7 +15,7 @@ categories = ["cryptography"] pqcrypto-traits = { path = "../pqcrypto-traits", version = "0.3.5" } pqcrypto-mlkem = { path = "../pqcrypto-mlkem", version = "0.1.0", optional = true } pqcrypto-classicmceliece = { path = "../pqcrypto-classicmceliece", version = "0.2.0", optional = true } -pqcrypto-hqc = { path = "../pqcrypto-hqc", version = "0.2.0", optional = true } +pqcrypto-hqc = { path = "../pqcrypto-hqc", version = "0.2.1", optional = true } pqcrypto-mldsa = { path = "../pqcrypto-mldsa", version = "0.1.0", optional = true } pqcrypto-falcon = { path = "../pqcrypto-falcon", version = "0.4.0", optional = true } pqcrypto-sphincsplus = { path = "../pqcrypto-sphincsplus", version = "0.7.0", optional = true }