open-quantum-safe/liboqs-rust · Security
oqs's Post-Quantum Signature scheme Rainbow level I parametersets broken
- GHSA ID
- GHSA-h864-m8vm-3xvj
- Severity
- high
- Published
- Updated
Description
Ward Beullens found a practical key-recovery attack against Rainbow.
The level I parametersets are removed from liboqs starting from version 0.7.2.
Find the scientific details in Breaking Rainbow Takes a Weekend on a Laptop.
This means all the oqs::sig::Algorithm::RainbowI* variants are insecure.