News for hackers. Stuff that matters.

A comment on Fast base64 encoding and decoding. Parent comment

Re:Fast base64 encoding and decoding by sagebird on Sunday January 21, 2018 @06:23PM (#16200704)
Re “trusting trust” - do you know if it is possible to build a constant time encoder on top of a maliciously compromised system/toolchain? I assume it is not possible in general. Maybe this is a worthless observation because it applies to almost everything and is not exploited often in practice.
[ Parent | on HN ]
Re:Fast base64 encoding and decoding by dchest on Monday January 22, 2018 @01:58PM (#16206892)
You're right, it's applies to everything.

There's also a problem with trust in CPU, and specifically, knowing which operations are constant time. See: https://bearssl.org/constanttime.html

[ Parent | on HN ]