Lattice-based cryptography prone to side channel attack? Is lattice-based cryptography still prone to side channel attacks? What are some mitigation strategies, if any?
my understanding is that Supersingular isogeny Diffie-Hellman (SIDH) is fully protected against timing and cache attacks as all operations on secret data run in constant time. That was my own experience.