18 ms·
This isn’t the same as a true mathematical break, but what it does show is that Falcon is very hard to implement without presenting side channels attacks. That
by api 3y ago
This isn’t the same as a true mathematical break, but what it does show is that Falcon is very hard to implement without presenting side channels attacks. That makes it unfavorable to a lot of cryptographers.
- jnwatson 3y agoIt took a long time before we came up with a bunch of mechanisms to hide the power profile of ECC scalar multiplies. I expect the same here.