June 9, 2021
Chou Tung - Academia Sinica
This paper presents a constant-time implementation of Classic McEliece tailored for stm32f4-Discovery. The implementation follows the 3rd-round specification. There is no data cache on stm32f4-Discovery, but our implementation does not take advantage of this: our implementation does not use secret-dependent memory indices, so it is constant-time even on M4 devices with data caches.