The state of tooling for verifying constant-timeness of cryptographic implementations

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

This post explores the current state of tools for verification of constant-time properties in cryptographic implementations, both static and dynamic. These tools are mostly unused in the development of open-source cryptographic libraries and remain only as results of academic work. I know of only four open-source cryptographic library that utilize these tools in an automated manner, similar to how…

Read on neuromancer.sk ↗