Final changes, now using the countermeasure from the Lucky 13 paper again (or a countermeasure that is very similar to it).
Final changes, now using the countermeasure from the Lucky 13 paper again (or a countermeasure that is very similar to it).

Timing differences in the test suite show at most 120 clock cycle difference (SHA-1/256/384).

randombit/botan,webmaster128/botan,randombit/botan,randombit/botan,Rohde-Schwarz-Cybersecurity/botan,Rohde-Schwarz-Cybersecurity/botan,webmaster128/botan,Rohde-Schwarz-Cybersecurity/botan,webmaster128/botan,webmaster128/botan,randombit/botan,Rohde-Schwarz-Cybersecurity/botan,Rohde-Schwarz-Cybersecurity/botan,webmaster128/botan,randombit/botan,Rohde-Schwarz-Cybersecurity/botan