project

constant-time-js

TypeScript/JavaScript library by Soatok that demonstrates constant-time cryptographic coding techniques, including branchless conditional selection and comparison helpers, published on npm.

Known aliases

constant-time-js library

Relationships

No evidence-backed relationships are recorded.

Current clusters

product1 publisher

V8's ToBoolean path leaks the secret bit that constant-time-js was written to hide

A University of British Columbia team showed that three selection functions in Soatok's constant-time-js leak their condition through V8's cache behaviour. He shipped version 0.5.0 and requested a CVE.

Publishers:soatok.blog

Reality

Evidence72
Adoption6
Hype gap−18
Incentives42
Confidence70