Is there constant-time support for all algorithms?

[derstrand]

Does liboqs support constant-time for all algorithms and for both platforms, x86 and aarch64?

[baentsch]

We strive for this property and have a test option for it (see OQS_ENABLE_TEST_CONSTANT_TIME and the latest x64 test run log) but this should probably not be taken as a guarantee. Adding a test for aarch64 may be sensible: Would you see a benefit in that and possibly be willing to contribute that?

Edit/Add: Just see in the driver code that some SPHINCS+ and ClassicMcEliece variants are exempted from the tests -- so it's probably safe to assume they don't exhibit this property.

[dstebila]

Take a look at the algorithm data sheets (the *.md files in https://github.com/open-quantum-safe/liboqs/tree/main/docs/algorithms) to see which algorithms' implementations on which platforms we do this testing for.