How we avoided side-channels in our new post-quantum Go cryptography libraries (blog.trailofbits.com)