readme: note on aes

paulmillr · Apr 25, 2024 · 4d74d8d · 4d74d8d
1 parent e1046f5
commit 4d74d8d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -463,6 +463,8 @@ constant-timeness_. Even statically typed Rust, a language without GC,
 for some cases. If your goal is absolute security, don't use any JS lib — including bindings to native ones.
 Use low-level libraries & languages. Nonetheless we're targetting algorithmic constant time.
 
+AES uses T-tables, which means it can't be done in constant-time in JS.
+
 ### Supply chain security
 
 * **Commits** are signed with PGP keys, to prevent forgery. Make sure to verify commit signatures.