blob: 0a5b632abcef608b85087999f7a60d90d9dc568b [file] [log] [blame]
Dave Rodgmancd1de632023-05-09 10:12:34 +01001Security
Dave Rodgman241a80b2023-09-07 12:01:29 +01002 * Updates to constant-time C code so that compilers are less likely to use
3 conditional instructions, which can have an observable difference in
4 timing. (Clang has been seen to do this.) Also introduce assembly
Dave Rodgman26923c72023-09-08 10:45:34 +01005 implementations for 32- and 64-bit Arm and for x86 and x86-64, which are
Dave Rodgman3fc3ae72023-08-15 12:24:31 +01006 guaranteed not to use conditional instructions.