Hacker News new | ask | show | jobs
by cryptonector 3234 days ago
The chosen primitives can still be implemented such that there are timing side channels.
1 comments

This doesn't happen naturally, except for Poly105 and curve25519 (for those one indeed has to be careful). A naive implementation of Chacha20 for instance is pretty much guaranteed to be immune to timing attacks.