Re: BoringSSL private key loading is not constant time

[Peter Gutmann <pgut001 () cs auckland ac nz>]

Alex Gaynor <alex.gaynor () gmail com> writes:

> But it seems to me any claim like "there are no timing side-channels" has to
> have an implicit "relevant to a threat model".

In which case it would probably have been good to explicitly say that, because
otherwise it's a "challenge accepted" statement.  The talk was fun, and this
wasn't presented as a serious attack but as a challenge-accepted one.

Peter.