3 ms·
My understanding is that such tricky side-channel free code ideally should not be directly written by humans. I know of at least one project that has made a lot
by veselin 6y ago
My understanding is that such tricky side-channel free code ideally should not be directly written by humans. I know of at least one project that has made a lot of progress on this idea, although they say the crypto primitives are still at research level:
https://www.microsoft.com/en-us/research/blog/project-everest-reaching-greater-heights-in-internet-communication-security/ https://www.microsoft.com/en-us/research/blog/project-everes...
- hansvm 6y agoI'm not convinced it should even be written by machines. Even at an assembly level, removing side-channels depends heavily on implementation choices for a particular chip. A constant-time (for a given chip) binary targeting some instruction set very well might turn into a timing side channel when deployed on a chip with newer/different optimizations, especially with respect to memory/data dependencies.