News for hackers. Stuff that matters.
Re:OpenSSL will release a high-severity issue fix on 25th by kroeckx on Monday March 22, 2021 @06:35PM (#26548287)
We've had code in OpenSSL written in C that was constant time until a newer version of both gcc and clang recognized (mask & a | ~mask & b) as a conditional assign and could do things like turn it into a branch.

Edit: It can turn "b = foo(); c = (mask & a | ~mask & b)" into "if (mask) c = a; else c = foo();"

There are no comments on this comment yet.