Cryptography: Side-Channel Resilience

Crypto audits target AES-NI—e.g., probing CTR mode for nonce collisions via GDB (break *EVP_EncryptUpdate). RSA moduli undergo GMP primality (mpz_probab_prime_p), discarding weak DH params. ECC P-521 resists DPA—verified with OpenSSL (ecparam -check). NTRUEncrypt benches lattice reductions (e.g., BKZ 2.0), prepping for Q-day. Consult checks cipher suites; premium aligns to CNSA Suite, with PKCS#11 HSM integration—paid precision.