[tor-dev] memcmp() & co. timing info disclosures?

Chris Palmer chris at eff.org
Sat May 7 06:16:14 UTC 2011

On May 6, 2011, at 10:25 PM, Robert Ransom wrote:

> I would expect GCC (and most other C compilers) to use a
> non-constant-time implementation of (v1 == v2).

Are there machines that implement uint8_t comparison in a data-dependent way? What's an example?

Chris Palmer
Technology Director, Electronic Frontier Foundation

More information about the tor-dev mailing list