Hacker News new | ask | show | jobs
by cipherboy 850 days ago
Kyber Slash (and Kyber Slash II) is a recent one in a very modern, PQC finalist algorithm that is missing from the list if you're looking to expand! This was caused by an integer division by a known constant (KYBER_Q = 3329) under a sensitive numerator, with some optimizing compilers not emitting a regular idiv instruction.

https://kyberslash.cr.yp.to/faq.html

1 comments

idiv is not constant-time on any ISA anyway ;)