On Wed, May 19, 2021, at 01:58, David Benjamin wrote: > constant-time should be a default baseline requirement for implementing any > cryptographic primitive.
Or put more generally, ... Avoiding side channels through value-independence should be a default baseline requirement for handling any secret. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls