Re:How I implemented my own crypto
by willtim on Thursday August 03, 2017 @04:01AM
(#14917792)
OCaml was used recently by the MirageOS folks to implement a better TLS than OpenSSL.
[ Parent
| on HN ]
Re:How I implemented my own crypto
by moosingin3space on Thursday August 03, 2017 @01:06PM
(#14921434)
TLS != crypto. TLS is actually very well-suited for a higher-level language like Rust or OCaml, especially due to how state machine patterns can be expressed safely in those languages. Crypto, on the other hand, often relies on low-level intrinsics to get good performance and cache timing attack resistance.
TLS depends on crypto and the mirage team implemented it using OCaml. It supports low-level intrinsics for timing attack resistance. See: https://github.com/mirleft/ocaml-nocrypto