RUSTSEC-2023-0071: Marvin Attack timing side-channel in rsa

Advisory Details

Description

Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key (Marvin Attack).

Dependency tree

rsa 0.9.9
├── jsonwebtoken 10.4.0
│   └── services 0.0.0
└── dcap-qvl-webpki 0.103.4+dcap.1
    └── dcap-qvl 0.4.1
        └── services 0.0.0

Why this is blocked

The rsa crate has no patched version available. This is a known ecosystem-wide issue.

Blocked by: rsa crate — no fix released

Risk assessment for this repo

Low. The rsa crate enters through two paths: (1) jsonwebtoken for JWT processing — this repo only uses HS256 (HMAC), not RSA algorithms; (2) dcap-qvl-webpki for certificate verification in TEE attestation, not for RSA decryption operations. The Marvin Attack requires observing timing of RSA decryption.

Remediation

• Monitor the rsa crate for a release that addresses the timing side-channel.
• Already tracked in audit.toml ignore list.

Start with the RUSTSEC-2023-0071 advisory and the dependency tree in this issue, then inspect the audit.toml ignore list. Confirm whether a fixed rsa release is available and whether the listed jsonwebtoken and dcap-qvl-webpki paths still apply. Done means updating the remediation or ignore entry when an upstream fix exists; no fix is currently available.