3 ms·
> And I'm weary to add caching at the library level and risk exposing a side channel. You mean a cache-timing attack against adiantum?
by d-z-m 2y ago
> And I'm weary to add caching at the library level and risk exposing a side channel.
You mean a cache-timing attack against adiantum?
- ncruces 2y agoI mean, caching the KDF result at the library level, without leaking that (e.g.) two databases share a key (that's the first one that came to mind, and why I removed the feature, instead of plugging the hole just to find another one).