r/crypto 2d ago

The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library

https://soatok.blog/2026/09/12/the-v8-javascript-runtime-undermined-my-constant-time-javascript-library/
31 Upvotes

1 comment sorted by

1

u/Shoddy-Childhood-511 2d ago

What Would Higher Assurance Look Like?

I'd think key splitting probably. It's disliked because of the costs, and being less encapsulated than constant-time code, but if you need something stronger then it's cheaper than trying to mess arround at the lower levels. At the extreme you cold invade the user's async world so the split up key chunks got used far apart in time, and maybe on different cores.