Close, but you're actually using inline asm in most cases. Then you're verifying the microarchitectural details of every CPU it executes on. (Intel's OpenSSL c

Close, but you're actually using inline asm in most cases. Then you're verifying the microarchitectural details of every CPU it executes on. (Intel's OpenSSL countermeasure to an RSA timing attack was dependent on CPUs not coming out with narrower cache lines than a predefined constant, but one did later.) It's difficult to get high assurance in software. Best bet is to design algorithms to avoid data-dependent accesses (see: djb).