Hacker News Reader

I think the consensus is still that you can't write side-channel/timing proof crypto in (most) Javascript (runtimes) - but that with webcrypto(?) most runtimes will provide the secure crypto primitives you need in order to do (secure) crypto with Javascript?

View on HN

To add, certain concerns still stand since the Web crypto API is extremely limited in capabilities (Example it doesn't support secp256k1).

However on the bright side performance.now() has a much worse resolution on most browsers, making timing attacks harder.

Reply on news.ycombinator.com