Re: streql - Constant-time string comparison
On Sat, Nov 1, 2014 at 9:56 PM, Joel Rees <firstname.lastname@example.org> wrote:
> Probably, the best solution for a constant-time compare is to
> pre-zero-fill the buffers and do binary compares (memcmp()) on the
> entire buffers. That means that these routines are a bit superfluous
I was distracted when I wrote that.
Constant width buffers, yes.
memcmp(), of course not.
Be careful when you look at conspiracy.
Look first in your own heart,
and ask yourself if you are not your own worst enemy.
Arm yourself with knowledge of yourself, as well.