Yes. In the crypto example, the backend would have to be sophisticated enough to know when the same addresses would be accessed every time, like bitslicing in

Yes. In the crypto example, the backend would have to be sophisticated enough to know when the same addresses would be accessed every time, like bitslicing in AES. [1] The devil absolutely is in the details. This is why I say Yao's capabilities on this front are unproven. [1]: https://www.bearssl.org/constanttime.html#constant-time-in-bearssl https://www.bearssl.org/constanttime.html#constant-time-in-b...