top | item 43942114

(no title)

nenaoki | 9 months ago

The Wasm Constant Time proposal was just moved to inactive 4 days ago[0].

From what I can tell the bulk of the work for it was done in 2018[1], but it needs updating to consider SIMD, and for legwork to be done on moving it along as a proper spec extension.

Until someone picks up this valuable work and lands this much-needed feature in Wasm, we're extremely vulnerable to timing attacks in all Wasm crypto.

[0] https://github.com/WebAssembly/proposals/blob/9fc7a85e/inact...

[1] https://github.com/PLSysSec/ct-wasm

discuss

order

No comments yet.