News for hackers. Stuff that matters.
Re:Introducing Sodium, a new cryptographic library by dietrichepp on Thursday March 07, 2013 @01:28AM (#5336437)
Well, maybe they are constant time today. But it is difficult to make wagers about the future of C compilers.
Re:Introducing Sodium, a new cryptographic library by floody-berry on Thursday March 07, 2013 @01:42PM (#5339317)
Everything that doesn't have assembler versions of all their constant time code (even NaCl under x86/x64) will be vulnerable then. It's possible that compilers start to "optimize" the branchless constructs, but it would almost be malicious as they extremely rare to ever encounter outside of specifically wanting not to branch.