There are some newer countermeasures but openssl doesn't implement any of them. http://eprint.iacr.org/2007/282 http://eprint.iacr.org/2007/282 I just took a q

There are some newer countermeasures but openssl doesn't implement any of them. http://eprint.iacr.org/2007/282 http://eprint.iacr.org/2007/282 I just took a quick look at 0.9.8h and this is still the case. The C code (aes_core.c) is the standard "alg-fst" version. The asm code in the subdirectory is faster but has no masking. In short, if you want timing attack resistance, you can't just expect it in standard libraries.