Constant-time support coming to LLVM: Protecting cryptographic code at the compiler level

This work may make it possible to write secure cryptographic primitives in safe portable Rust. Currently, doing this without introducing timing-attack vulnerabilities requires assembly, which is one reason why pure-Rust crypto adoption has struggled compared to bindings to C libraries (if you have to do unsafe non-portable things either way, you might as well use a mature library).