product1 publisher
V8's ToBoolean path leaks the secret bit that constant-time-js was written to hide
A University of British Columbia team showed that three selection functions in Soatok's constant-time-js leak their condition through V8's cache behaviour. He shipped version 0.5.0 and requested a CVE.
Publishers:soatok.blog
Reality
- Evidence72
- Adoption6
- Hype gap−18
- Incentives42
- Confidence70