[tor-dev] memcmp() & co. timing info disclosures?

Chris Palmer chris at eff.org
Sat May 7 00:49:32 UTC 2011

On May 6, 2011, at 5:08 PM, Jacob Appelbaum wrote:

> We can
> #define over memcmp but I fear that it's better to specifically
> eradicate each one by hand and really think things over on a case by
> case basis.

FWIW, I agree.

Nice work, Marsh!

Chris Palmer
Technology Director, Electronic Frontier Foundation

More information about the tor-dev mailing list