3 ms·

Yes, x86: https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-gu

• touisteur 2y ago
  Oooh has it shipped anywhere already ?
  • pclmulqdq 2y ago
    Everywhere. The constant-time bit defaults to "1" because the current x86 CPUs follow all of the promises of this already. The particular feature here is to allow Intel to make optional optimizations that are not constant-time on the particular subset of instructions. ARM cores also have a similar set of promises.