3 ms·
You are not mandated a constant-time aes implementation either.
by dependenttypes 6y ago
You are not mandated a constant-time aes implementation either.
- baby 6y agonobody cares about an AES constant time implementation, but any specification about MACs and signing algorithms will specifically mention that you need to have constant-time operations