We adopted Field2 so that we can make arithmetic constant time. We then later decided this was harder to read and decided instead to tell implementers in prose how to deal with side channels.
In Mastic, we took this a step further by using bool for the control bits. I think this is a lot clearer.
We adopted
Field2so that we can make arithmetic constant time. We then later decided this was harder to read and decided instead to tell implementers in prose how to deal with side channels.In Mastic, we took this a step further by using
boolfor the control bits. I think this is a lot clearer.