search

seanmonstar / gryphon

HTTP Request Signing with Ed25519
Mozilla Public License 2.0
4 stars 2 forks source link

side-channel attacks #4

Open timkuijsten opened 9 years ago

timkuijsten commented 9 years ago

There seems to be no definitive answer on whether emscripten/asm.js is safe against timing attacks if the C source is (like NaCl) [1]. Are you maybe in a position to get clarification on this issue? It relates to this module because of the dependency on js-nacl that is compiled by Emscripten [2].

[1] https://github.com/jedisct1/libsodium.js/issues/21 [2] https://github.com/tonyg/js-nacl/issues/30

timkuijsten commented 9 years ago

ps. some related notes in https://github.com/dchest/tweetnacl-js/issues/80