Hot off the press. Page 16 has list of ZK libraries that may contain potential witness leakages due to timing attacks on POSEIDON hash implementations. 

> On the positive side, we demonstrate that the computational overhead to protect against these attacks is relatively small.

Hot off the press. Page 16 has list of ZK libraries that may contain potential witness leakages due to timing attacks on POSEIDON hash implementations. 

> On the positive side, we demonstrate that the computational overhead to protect against these attacks is relatively small.
https://eprint.iacr.org/2024/1390

security engineering and applied cryptography mantej.blog