Timing Cryptanalysis Attack

[Tom Weinstein]

Eric Young wrote:
> 
> I for one will probably add a flag for conditional compilation of my
> bignumber library so that it will take constant time.  This may be a
> %10 slow down (using small windows exponentiation) which is trivial
> compared to the %30 speedup I will probably get when I implement a
> faster mod function :-).

Careful.  Even if you can make the number of executed instructions the
same, you still have to worry about timing differences due to branches
and the way the hardware multiplier handles different operands.

-- 
Sure we spend a lot of money, but that doesn't mean | Tom Weinstein
we *do* anything.  --  Washington DC motto          | tomw at netscape.com