Hacker News new | ask | show | jobs
by astrange 1027 days ago
Some CPUs do have non-constant-time multiplies.
1 comments

And one protection against that is to map the key into another space using a random (or close enough) key for that transformation, perform the calculation homomorphically, then transform back.

This is often too expensive, but it does come up as a possibility in some zero knowledge protocols.