{"id":"https://openalex.org/W7162411133","doi":"https://doi.org/10.1007/s13389-026-00394-y","title":"On timing side channels in \u201cconstant-time implementations\u201d","display_name":"On timing side channels in \u201cconstant-time implementations\u201d","publication_year":2026,"publication_date":"2026-05-26","ids":{"openalex":"https://openalex.org/W7162411133","doi":"https://doi.org/10.1007/s13389-026-00394-y"},"language":"en","primary_location":{"id":"doi:10.1007/s13389-026-00394-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13389-026-00394-y","pdf_url":null,"source":{"id":"https://openalex.org/S2764800400","display_name":"Journal of Cryptographic Engineering","issn_l":"2190-8508","issn":["2190-8508","2190-8516"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptographic Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1007/s13389-026-00394-y","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099687816","display_name":"Adrian Cinal","orcid":"https://orcid.org/0009-0001-9789-0470"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Adrian Cinal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5099687816"],"corresponding_institution_ids":[],"apc_list":{"value":2990,"currency":"USD","value_usd":2990},"apc_paid":{"value":2990,"currency":"USD","value_usd":2990},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.65035909,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"16","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6396999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6396999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.31839999556541443,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.008100000210106373,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.881600022315979},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6888999938964844},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5228999853134155},{"id":"https://openalex.org/keywords/assembly-language","display_name":"Assembly language","score":0.46560001373291016},{"id":"https://openalex.org/keywords/optimizing-compiler","display_name":"Optimizing compiler","score":0.4544000029563904},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.4415000081062317},{"id":"https://openalex.org/keywords/microarchitecture","display_name":"Microarchitecture","score":0.42149999737739563},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.4108000099658966}],"concepts":[{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.881600022315979},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8590999841690063},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6888999938964844},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5228999853134155},{"id":"https://openalex.org/C50831359","wikidata":"https://www.wikidata.org/wiki/Q165436","display_name":"Assembly language","level":3,"score":0.46560001373291016},{"id":"https://openalex.org/C190902152","wikidata":"https://www.wikidata.org/wiki/Q1325106","display_name":"Optimizing compiler","level":3,"score":0.4544000029563904},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.4415000081062317},{"id":"https://openalex.org/C107598950","wikidata":"https://www.wikidata.org/wiki/Q259864","display_name":"Microarchitecture","level":2,"score":0.42149999737739563},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.4108000099658966},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3971000015735626},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3928000032901764},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.37689998745918274},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3736000061035156},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35510000586509705},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.352400004863739},{"id":"https://openalex.org/C84462506","wikidata":"https://www.wikidata.org/wiki/Q173142","display_name":"Digital signal processing","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.3434999883174896},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.32589998841285706},{"id":"https://openalex.org/C78766204","wikidata":"https://www.wikidata.org/wiki/Q555032","display_name":"Multi-core processor","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C139571649","wikidata":"https://www.wikidata.org/wiki/Q1156793","display_name":"Program optimization","level":3,"score":0.2851000130176544},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28220000863075256},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C68366613","wikidata":"https://www.wikidata.org/wiki/Q5156378","display_name":"Compiler correctness","level":3,"score":0.27570000290870667},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s13389-026-00394-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13389-026-00394-y","pdf_url":null,"source":{"id":"https://openalex.org/S2764800400","display_name":"Journal of Cryptographic Engineering","issn_l":"2190-8508","issn":["2190-8508","2190-8516"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptographic Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s13389-026-00394-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s13389-026-00394-y","pdf_url":null,"source":{"id":"https://openalex.org/S2764800400","display_name":"Journal of Cryptographic Engineering","issn_l":"2190-8508","issn":["2190-8508","2190-8516"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptographic Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.41010814905166626}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W50107694","https://openalex.org/W1488058190","https://openalex.org/W1509468219","https://openalex.org/W1613874182","https://openalex.org/W1680927362","https://openalex.org/W1811355673","https://openalex.org/W1910751411","https://openalex.org/W2115148615","https://openalex.org/W2286649377","https://openalex.org/W2544328905","https://openalex.org/W2594174595","https://openalex.org/W2860564492","https://openalex.org/W4394595229","https://openalex.org/W7117980178","https://openalex.org/W7153120136"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Cryptographic":[1],"software":[2],"following":[3],"sound,":[4],"modern":[5],"practices":[6],"and":[7,110,116,133,142,192],"adhering":[8],"to":[9,43,62,104,203],"recommendations":[10,87],"for":[11,88,180,197],"writing":[12],"constant-time":[13],"code":[14],"(e.g.,":[15],"RFC":[16],"7748)":[17],"may":[18],"yet":[19],"leak":[20],"secret":[21],"data":[22],"via":[23],"the":[24,74,79,93,108,166,171,176,181,204],"most":[25],"na\u00efve":[26],"kind":[27],"of":[28,73,153,175,189],"timing":[29,140],"side":[30],"channels":[31],"when":[32],"a":[33,37,158,162,200],"\u201csecure\u201d":[34],"implementation":[35,146,188],"in":[36,92,131,165,170],"high-level":[38],"language":[39],"gets":[40],"compiled":[41],"down":[42],"assembly":[44],"instructions.":[45],"This":[46],"paper":[47],"shows":[48],"that":[49,60,78],"it":[50],"is":[51,102,114,183,208],"not":[52],"only":[53],"aggressive":[54],"optimization":[55],"done":[56],"by":[57,107],"smart":[58],"compilers":[59],"leads":[61],"such":[63],"vulnerabilities,":[64],"as":[65,137],"previously":[66],"often":[67],"thought,":[68],"but":[69],"also":[70],"inherent":[71],"limitations":[72],"target":[75],"CPU":[76],"architecture":[77,94],"compiler":[80,168,177],"must":[81],"work":[82],"around,":[83],"coupled":[84],"with":[85],"dangerous":[86],"instruction":[89,206],"idioms":[90],"found":[91,130],"documentation.":[95],"The":[96,148],"popular":[97],"customizable":[98],"IP":[99],"core,":[100],"Xtensa,":[101,198],"identified":[103],"be":[105],"affected":[106],"problem,":[109],"its":[111],"particular":[112],"vulnerability":[113,164,182],"studied":[115],"exploited.":[117],"Key-recovery":[118],"attacks":[119,141,149],"are":[120,150],"conducted":[121],"against":[122,139,161],"Xtensa-based":[123],"ESP32":[124],"chips":[125],"running":[126],"ephemeral-static":[127],"X25519":[128,190],"implementations":[129],"wolfSSL":[132],"CycloneCRYPTO,":[134],"both":[135],"advertised":[136],"resistant":[138],"using":[143],"two":[144],"unrelated":[145],"strategies.":[147],"four":[151],"orders":[152],"magnitude":[154],"more":[155],"effective":[156],"than":[157],"similar":[159],"attack":[160],"related":[163],"MSVC":[167],"known":[169],"literature.":[172],"A":[173],"resolution":[174],"bug":[178],"responsible":[179],"proposed.":[184,209],"Finally,":[185],"an":[186],"optimized":[187],"(Ed25519)":[191],"X448":[193],"(Ed448)":[194],"field":[195],"arithmetic":[196],"leveraging":[199],"DSP":[201],"extension":[202],"core":[205],"set,":[207]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-05-27T00:00:00"}
