Daniel J. Bernstein https://mathstodon.xyz/@djb@cr.yp.to/113079723152809027 https://mathstodon.xyz/@djb@cr.yp.to/113079723152809027 > Some tools at different l

Daniel J. Bernstein https://mathstodon.xyz/@djb@cr.yp.to/113079723152809027 https://mathstodon.xyz/@djb@cr.yp.to/113079723152809027 > Some tools at different layers that would have stopped timing attacks against ECDSA nonce-inversion software: (1) the safegcd algorithm, https://gcd.cr.yp.to https://gcd.cr.yp.to; (2) switching from ECDSA to EdDSA, typically Ed25519; (3) using TIMECOP (https://bench.cr.yp.to/tips.html#timecop https://bench.cr.yp.to/tips.html#timecop) to scan for leaks.