-The Robusta team: Deepak Pillai, Anirban Chakraborty, Chitchanok Chuengsatiansup, Matthew Roughan, Peter Schwabe, and Yuval Yarom, for an independent constant-time (timing/cache) side-channel analysis of Bouncy Castle Java across releases 1.73 through 1.85, further identifying secret-dependent control-flow, memory-access, and variable-latency-arithmetic findings across several of the PQC candidate implementations and several classical algorithms; 41 of these findings, including the three EC Diffie-Hellman scalar-multiplication findings addressed by the constant-time variable-point multiplier work in 1.86, have been addressed in subsequent releases to date.
0 commit comments