Re:OpenSSL will release a high-severity issue fix on 25th
by dvdkhlng on Tuesday March 23, 2021 @06:47AM
(#26553405)
Note how this problem of "sufficient complexity" is an asymmetric problem between code author and compiler. A rather simple transformation implemented by the author to make the code constant-time may require NP-hard effort for the compiler to undo.
(but then the compiler may still do other unrelated transformations that end up making the code non-constant time again)
(but then the compiler may still do other unrelated transformations that end up making the code non-constant time again)