deps: update module github.com/cloudflare/circl to v1.3.7 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/cloudflare/circl	v1.3.6 -> v1.3.7

GitHub Vulnerability Alerts

GHSA-9763-4f94-gfch

Impact

On some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.

Does not apply to ephemeral usage, such as when used in the regular way in TLS.

Patches

Patched in 1.3.7.

References

• kyberslash.cr.yp.to

---

Release Notes

cloudflare/circl (github.com/cloudflare/circl)

v1.3.7: CIRCL v1.3.7

Compare Source

CIRCL v1.3.7

What's Changed

• build(deps): bump golang.org/x/crypto from 0.3.1-0.20221117191849-2c476679df9a to 0.17.0 by @​dependabot in https://github.com/cloudflare/circl/pull/467
• kyber: remove division by q in ciphertext compression by @​bwesterb in https://github.com/cloudflare/circl/pull/468
• Releasing CIRCL v1.3.7 by @​armfazh in https://github.com/cloudflare/circl/pull/469

New Contributors

• @​dependabot made their first contribution in https://github.com/cloudflare/circl/pull/467

Full Changelog: cloudflare/circl@v1.3.6...v1.3.7

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.