[tor-dev] memcmp() & co. timing info disclosures?

Chris Palmer chris at eff.org
Sat May 7 06:16:14 UTC 2011


On May 6, 2011, at 10:25 PM, Robert Ransom wrote:

> I would expect GCC (and most other C compilers) to use a
> non-constant-time implementation of (v1 == v2).

Are there machines that implement uint8_t comparison in a data-dependent way? What's an example?


-- 
Chris Palmer
Technology Director, Electronic Frontier Foundation
https://www.eff.org/code



More information about the tor-dev mailing list