News for hackers. Stuff that matters.

A comment on S2n-TLS – A C99 implementation of the TLS/SSL protocol. Parent comment

Re:S2n-TLS – A C99 implementation of the TLS/SSL protocol by quotemstr on Sunday December 03, 2023 @05:00PM (#38511175)
> But formal methods (and TLA+ for distributed computation) don't eliminate side channels.

True, but they eliminate whole classes of attack. I'm normally aghast at people writing new code in plain C, but formally verified plain C counts as a whole other and better paradigm to me.

[ Parent | on HN ]
Re:S2n-TLS – A C99 implementation of the TLS/SSL protocol by rewmie on Monday December 04, 2023 @02:29AM (#38514579)
> I'm normally aghast at people writing new code in plain C,

Why?

[ Parent | on HN ]