News for hackers. Stuff that matters.

A comment on Heap-based buffer overflow in Sudo. Parent comment

Re:Heap-based buffer overflow in Sudo by vitno on Tuesday January 26, 2021 @07:00PM (#25922533)
that's not true these days, rustls is a great TLS lib that has been through at least one serious external security audit.

https://cure53.de/pentest-report_rustls.pdf

[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by roblabla on Tuesday January 26, 2021 @07:37PM (#25922805)
For what it's worth, rustls relies on ring which has primitives written in C and ASM because getting constant-time operation guarantees from Rust is Very Hard. Though progress is being made on this area.
[ Parent | on HN ]