Oh, I thought you were talking about the bit twiddling required to implement constant time lookup and constant time branching. > Side-channel resistance is lar

Oh, I thought you were talking about the bit twiddling required to implement constant time lookup and constant time branching. > Side-channel resistance is largely a matter of reducing the Signal-to-Noise ratio for traces an attacker can leverage to extract secrets. Who cares about resistance when you can have immunity? Constant time crypto leaks zero signal through timings, who needs any noise to mask that utter absence of signal? Unless maybe you were thinking about other side channels, such as energy consumption, or electromagnetic emissions? I'd agree those are worth pursuing for smart cards and dongles, but on regular computers (from palmtops to servers), the threat is mostly academic.