3 ms·
There is also a performance question: https://youtu.be/kbn9UCRK2Qg?t=1228 https://youtu.be/kbn9UCRK2Qg?t=1228 Judging by the image of generated assembly code
by ducktective 4y ago
There is also a performance question:
https://youtu.be/kbn9UCRK2Qg?t=1228 https://youtu.be/kbn9UCRK2Qg?t=1228
Judging by the image of generated assembly code in movfuscator repo, I don't think the mov-only solution would be efficient.
- c7DJTLrn 4y agoAbsolutely, the performance would be terrible, but under circumstances where you need to be sure there's no side channels (like in a secure element kind of chip) maybe that's acceptable.
- insanitybit 4y agoIf all you're doing is comparing two hash values it's probably a lot less important that it's fast and more important that it's side channel resistant.
- WJW 4y agoBeing both side channel resistant and fast would be even better though. Movfuscator is a cool project but there are definitely better ways to generate constant time code.