Topic

Constant-time programming

The discipline of writing code whose execution time and memory access pattern do not depend on secret values, usually by replacing branches and secret-indexed lookups with arithmetic on masks.

Current clusters

product1 publisher

V8's ToBoolean path leaks the secret bit that constant-time-js was written to hide

A University of British Columbia team showed that three selection functions in Soatok's constant-time-js leak their condition through V8's cache behaviour. He shipped version 0.5.0 and requested a CVE.

Publishers:soatok.blog

Reality

Evidence72
Adoption6
Hype gap−18
Incentives42
Confidence70