Comment Comment by bascule Author here.You're right (if you add a constant-time check upon decryption that the bits are zero).I suggested as much here yesterday, and may revise the scheme to do so:https://www.reddit.com/r/crypto/comments/fyn8cs/aesbased_syn... parent bascule 6 years ago
You're right (if you add a constant-time check upon decryption that the bits are zero).
I suggested as much here yesterday, and may revise the scheme to do so:
https://www.reddit.com/r/crypto/comments/fyn8cs/aesbased_syn...