3 ms·
"constant-time" isn't a literally technically correct descriptor, it's a short-hand What matters is that the variance of execution time, which memory addresses
by some_furry 2y ago
"constant-time" isn't a literally technically correct descriptor, it's a short-hand
What matters is that the variance of execution time, which memory addresses are accessed, etc. is independent of any secret inputs.
- ghostpepper 2y agoso theoretically using timers and adding sleeps could solve the problem but practically there are better ways to achieve the goal of no timing information leakage?
- some_furry 2y agoYes. I wrote this a few years ago as an introduction to how to write constant-time algorithms https://soatok.blog/2020/08/27/soatoks-guide-to-side-channel-attacks/ https://soatok.blog/2020/08/27/soatoks-guide-to-side-channel...