Timing attacks, Twofish housekeeping

[Robert J. Hansen]

> So I wanted to ask the list: are timing attacks an issue for us at
> all?  How much effort is it worth to eliminate them?

For the vast majority of users, timing attacks are not part of the
threat model.  Patching the code throughout to eliminate timing attacks
would be an awful lot of work for very little gain.  IMO, at least.  :)

-- 
Geek Code: GAT d- s+:+ a27 C++(+++)$ ULB++>++++ P++ L+++>++++ E W+ N+ w
           PS+ PE++ Y++ PGP++ t+ 5++ X-- R tv b+++ DI++ D--- G+ e++ h*
           r* y+*