| - module: github.com/hashicorp/vault |
| - package: github.com/hashicorp/vault/shamir |
| Shamir's secret sharing implementation vulnerable to cache-timing attacks |
| HashiCorp Vault's implementation of Shamir's secret sharing uses precomputed |
| table lookups, and is vulnerable to cache-timing attacks. |
| An attacker with access to, and the ability to observe a large number of |
| unseal operations on the host through a side channel may reduce the search |
| space of a brute force effort to recover the Shamir shares. |
| credit: Giuseppe Cocomazzi |
| - fix: https://github.com/hashicorp/vault/pull/19495 |
| - web: https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078 |
