Re:How I implemented my own crypto
by cryptonector on Thursday August 03, 2017 @12:03PM
(#14920741)
The chosen primitives can still be implemented such that there are timing side channels.
[ Parent
| on HN ]
Re:How I implemented my own crypto
by loup-vaillant on Friday August 04, 2017 @02:50AM
(#14926831)
This doesn't happen naturally, except for Poly105 and curve25519 (for those one indeed has to be careful). A naive implementation of Chacha20 for instance is pretty much guaranteed to be immune to timing attacks.