BearSSL

BearSSL's documentation page on constant-time cryptography explains why cryptographic implementations must avoid execution paths whose timing depends on secret data. Timing variations can leak information about keys or plaintext through side-channel attacks, so operations are written to run in the same time regardless of input. The technical explanation is drawing attention among developers discussing secure implementation practices.