40 ms·

I’m very surprised that folks are still building critical security software like this while making elementary mistakes like not using constant time operations.

by nusl 3y ago

I’m very surprised that folks are still building critical security software like this while making elementary mistakes like not using constant time operations. This is a class of vulnerability almost as old as I can remember.

rainworld 3y ago
As seen below, this vulnerabilty was also present in the reference C Kyber code https://symbolic.software/blog/2023-12-19-kyberk2sovariabletiming/ https://symbolic.software/blog/2023-12-19-kyberk2sovariablet...