use of BigInt is vulnerable to timing attacks

[0xDatapunk]

zk-kit/packages/poseidon-cipher/src/poseidonCipher.ts

Line 19 in c912111

export const poseidonEncrypt = (

implementation that uses the javascript BigInt is vulnerable to timing attacks (more info).
If constant-time operation is a requirement, this needs changes to use constant time modular math libraries.
Otherwise, dependent packages/applications should be made aware.

[cedoor]

While waiting for a library, I think we can add a warning in the readme file for now.