4 ms·
People keep finding serious architectural leaks in CPUs like Spectre/Meltdown, which makes me question whether any constant-time implementation can really be wi
by pornel 3y ago
People keep finding serious architectural leaks in CPUs like Spectre/Meltdown, which makes me question whether any constant-time implementation can really be without observable side effects.
- astrange 3y agoSome CPUs do have non-constant-time multiplies.
- adastra22 3y agoAnd one protection against that is to map the key into another space using a random (or close enough) key for that transformation, perform the calculation homomorphically, then transform back. This is often too expensive, but it does come up as a possibility in some zero knowledge protocols.