On Mon, Nov 13, 2017 at 09:45:25PM +0200, Jarkko Sakkinen wrote: > TinyCrypt (https://github.com/01org/tinycrypt) is used as AES > implementation, which is not timing resistant. Eventually this needs to > be replaced with AES-NI based implementation that could be either > - re-use existing AES-NI code in the kernel This. That is an absolute must. We're not going to merge custom AES implementations.