compiler people: how likely is it that timing-safe C code is future-proof? as in, how likely is it that future compilers will e.g. take "uint8_t diff = 0; for (size_t i=0; i<len; i++) diff |= a[i]^b[i]; return diff != 0" and put a conditional bailout jump in the loop?
-
-
Replying to @johnregehr
AFAIU delay loops are insufficient against local adversaries
1 reply 0 retweets 0 likes
Replying to @tehjh @johnregehr
(where "local" includes "co-hosted")
5:09 PM - 24 Feb 2018
0 replies
0 retweets
3 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.