Skip to content
This repository has been archived by the owner on Oct 2, 2023. It is now read-only.

Rescue-Prime impl is not constant-time #19

Open
Nashtare opened this issue Feb 7, 2022 · 0 comments
Open

Rescue-Prime impl is not constant-time #19

Nashtare opened this issue Feb 7, 2022 · 0 comments
Labels
security Induces a (potential) security issue

Comments

@Nashtare
Copy link
Contributor

Nashtare commented Feb 7, 2022

While the underlying arithmetic in Cheetah is made constant-time, the current implementation of Rescue-Prime for the two different sets of parameters is not constant-time. This can be an issue for applications hashing sensitive data, which is currently not the case.
@Nashtare Nashtare added the security Induces a (potential) security issue label Feb 7, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
security Induces a (potential) security issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Nashtare