there's some pretty great support for sodium and the like in thrussh, i think the question is whether or not that library is used correctly and what it's safety is in regards to timing attacks. This should not be a giant mystery of how safe it is. This is the file to start with https://github.com/posix4e/thrussh-snapshot/blob/master/src/...