Subject: [quicwg/base-drafts] 509afe: Constant time

From: Martin Thomson <[email-masked]>
Date: Sun, 28 Jan 2018 22:12:15 -0800

Branch: refs/heads/pn-encrypt
  Home:   https://github.com/quicwg/base-drafts
  Commit: 509afe9ca210931bdb7e6ff54037d15b8490fa57
      https://github.com/quicwg/base-drafts/commit/509afe9ca210931bdb7e6ff54037d15b8490fa57
  Author: Martin Thomson <[email-masked]>
  Date:   2018-01-29 (Mon, 29 Jan 2018)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Constant time

This is pretty onerous, so I'd like to see if people think that this is
acceptable.  The cost is that all packets need to have their AEAD run the whole
way through.  The gain is that there will be no side-channels for attackers to exploit.