You are not mandated a constant-time aes implementation either. | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

dependenttypes on Sept 12, 2020 | parent | context | favorite | on: Raccoon Attack

You are not mandated a constant-time aes implementation either.

baby on Sept 12, 2020 [–]

nobody cares about an AES constant time implementation, but any specification about MACs and signing algorithms will specifically mention that you need to have constant-time operations

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact