Very cool work, but blinding is a good countermeasure [1], which all RSA implementations should use. [1] https://en.wikipedia.org/wiki/Blinding_(cryptography)

Very cool work, but blinding is a good countermeasure [1], which all RSA implementations should use. [1] https://en.wikipedia.org/wiki/Blinding_(cryptography) https://en.wikipedia.org/wiki/Blinding_(cryptography) Edit: And BTW, yet one more argument for NaCl or libsodium, which boasts "no data-dependent branches."