3 ms·
Kyber Slash (and Kyber Slash II) is a recent one in a very modern, PQC finalist algorithm that is missing from the list if you're looking to expand! This was ca
by cipherboy 3y ago
Kyber Slash (and Kyber Slash II) is a recent one in a very modern, PQC finalist algorithm that is missing from the list if you're looking to expand! This was caused by an integer division by a known constant (KYBER_Q = 3329) under a sensitive numerator, with some optimizing compilers not emitting a regular idiv instruction.
https://kyberslash.cr.yp.to/faq.html https://kyberslash.cr.yp.to/faq.html
- mratsim 3y agoidiv is not constant-time on any ISA anyway ;)