Often that hints boils down to use assembly though. Constant-time is a pain to achieve and new compiler optimizations might make your code not constant-time an

Often that hints boils down to use assembly though. Constant-time is a pain to achieve and new compiler optimizations might make your code not constant-time anymore: https://www.cl.cam.ac.uk/~rja14/Papers/whatyouc.pdf https://www.cl.cam.ac.uk/~rja14/Papers/whatyouc.pdf Given that I'm writing such a cryptographic library, I am very interesting on the compiler hints you use.