3 ms·
I think it's hard to pick one between 2 and 3, as after knowing about a possible side channel from 3, you need 2 to prevent it on the specific architecture you'
by GTP 4y ago
I think it's hard to pick one between 2 and 3, as after knowing about a possible side channel from 3, you need 2 to prevent it on the specific architecture you'll run your code on.
- mlyle 4y agoI don't know that I agree. Simply speaking, the vast majority of cryptography work has nothing to do with tomfoolery to prevent side channels-- even if we're doing low-level fundamental algorithm stuff, which most of the time cryptographers are not doing. (When's the last time you thought about AES in detail?) The way people stumble is in protocol errors and fundamental errors of composition.
- GTP 4y agoYes, often mistakes happen at a higher level. But the "don't implement your own crypto" advice also covers implementations of primitives.