3 ms·

Some CPUs do have non-constant-time multiplies.

• adastra22 3y ago
  And one protection against that is to map the key into another space using a random (or close enough) key for that transformation, perform the calculation homomorphically, then transform back. This is often too expensive, but it does come up as a possibility in some zero knowledge protocols.