Subject: Re: [Bitcoin-development] New side channel attack that can recover Bitcoin keys

From: Pieter Wuille <[email-masked]>
Date: Wed, 5 Mar 2014 15:04:41 +0100

On Wed, Mar 5, 2014 at 2:18 PM, Jean-Paul Kogelman
<[email-masked]> wrote:
>> As far as I know, judging from the implementation, there is hardly any
>> effort to try to prevent timing attacks.
>>
>
> Is it safe to assume that this is also true for your secp256k1 implementation?

I've done some preliminary work on making it leak less, but it's by no
means guaranteed to be constant time either (so better assume it is
not).

-- 
Pieter