[tor-dev] memcmp() & co. timing info disclosures?

Chris Palmer chris at eff.org
Sat May 7 00:49:32 UTC 2011


On May 6, 2011, at 5:08 PM, Jacob Appelbaum wrote:

> We can
> #define over memcmp but I fear that it's better to specifically
> eradicate each one by hand and really think things over on a case by
> case basis.

FWIW, I agree.

Nice work, Marsh!


-- 
Chris Palmer
Technology Director, Electronic Frontier Foundation
https://www.eff.org/code



More information about the tor-dev mailing list