V8 optimizations break constant-time crypto in JavaScript

A PhD student found that V8 runtime optimizations break the constant-time guarantees of a JavaScript crypto library. Researchers argue that non-deterministic code may be the only viable defense against side channels in JS environments.

2026-09-12 ~ 2026-09-12 · 2 related posts

• V8 JIT Optimizations Break Constant-Time Guarantees in JS Crypto Library — jedisct1 · 2026-09-12
• Non-Determinism Is the Only Fix for JS/Wasm Side-Channels, Argues Dev — jedisct1 · 2026-09-12