3 ms·

Extremely unlikely; Rijndael S-Box entries can be calculated in constant time using first principles or bit-slicing. No lookup tables needed. Timing side-chann

Extremely unlikely; Rijndael S-Box entries can be calculated in constant time using first principles or bit-slicing. No lookup tables needed. Timing side-channel vulnerabilities in an AES S-Box implementation would be flaws in the implementation and application as opposed to the algorithm.

badrabbit 7y ago
Yes, they can be calculated in constant time, NSA's friends can be told to use constant time from the start while everyone else used libs that copies from the non constant time reference implementation?
- optimiz3 7y ago
  Reference code is almost never what you want to go into production, what with various perf and security issues. It's there to test spec compliance.
  - badrabbit 7y ago
    Yes but flaws in he spec bleed into all implementation that ..you now...uses it as a reference.