2 ms·

I think the consensus is still that you can't write side-channel/timing proof crypto in (most) Javascript (runtimes) - but that with webcrypto(?) most runtimes

by e12e 4y ago

I think the consensus is still that you can't write side-channel/timing proof crypto in (most) Javascript (runtimes) - but that with webcrypto(?) most runtimes will provide the secure crypto primitives you need in order to do (secure) crypto with Javascript?

Anunayj 4y ago
To add, certain concerns still stand since the Web crypto API is extremely limited in capabilities (Example it doesn't support secp256k1). However on the bright side performance.now() has a much worse resolution on most browsers, making timing attacks harder.