• Manuel Pégourié-Gonnard's avatar
    cmac: make subkey gen more constant-time · 475f06f6
    Manuel Pégourié-Gonnard authored
    The previous version had secret-dependent memory accesses. While it was
    probably not an issue in practice cause the two bytes of the array are
    probably on the same cache line anyway, as a matter of principle this should
    be avoided.
    475f06f6