PT-2026-135630

Summary Several operations intended to be constant-time could execute secret-dependent branches, depending on the compiler and target CPU. These include subtraction, zero counting, division, and Montgomery multiplication. Additionally, UintRef equality could terminate at the first unequal limb, a...