6 ms·

is a constant-time algorithm just an algorithm that completes the entire calculation before returning even if it knows the correct answer sooner?

• some_furry 2y ago
  "constant-time" isn't a literally technically correct descriptor, it's a short-hand What matters is that the variance of execution time, which memory addresses are accessed, etc. is independent of any secret inputs.
  • ghostpepper 2y ago
    so theoretically using timers and adding sleeps could solve the problem but practically there are better ways to achieve the goal of no timing information leakage?
    • some_furry 2y ago
      Yes. I wrote this a few years ago as an introduction to how to write constant-time algorithms https://soatok.blog/2020/08/27/soatoks-guide-to-side-channel-attacks/ https://soatok.blog/2020/08/27/soatoks-guide-to-side-channel...