Quote from: klokan on January 31, 2015, 01:31:07 PM

Edit: Also, if the two precomputed arrays were interleaved instead one after the other, it would make memory access pattern more difficult do distinguish. How would you say this would affect the security of the lib?

I'd say that it wouldn't change much because you'd still have distinct memory access patterns, but overall it's better to stick to well known methods rather than trying to improve existing code that wasn't designed with SPA in mind - we're currently working on some SPA resistant Open Source ECC library for our next product.

Quote from: JorgeStolfi on January 31, 2015, 02:45:23 PM

Quote from: btchip on January 31, 2015, 12:49:44 PM

but I believe it's still doable

A complete demonstration would be in order.

Feel free, I have hardware wallets to design

Quote from: JorgeStolfi on January 31, 2015, 02:48:32 PM

By the way, beware of buying hardware wallets second-hand or from random shops. Buy only direct from the manufacturer or from their approved secure-shipping resellers.

old troll is old