On: Cache Missing for Fun & Profit

[KateLawson]

There are some newer countermeasures but openssl doesn't implement any of them. http://eprint.iacr.org/2007/282

I just took a quick look at 0.9.8h and this is still the case. The C code (aes_core.c) is the standard "alg-fst" version. The asm code in the subdirectory is faster but has no masking.

In short, if you want timing attack resistance, you can't just expect it in standard libraries.