@ity @froge

I haven’t looked at rustls for a while, but my understanding was that they wrote the protocol parsing and state machines in Rust (which is a huge win for security) and delegated the crypto to something else, which would normally include all of the sensible countermeasures for side channels.