Re:Think memcmp is safe? Think again
by aabbdev on Thursday October 30, 2025 @02:48AM
(#45757072)
Shipped a timing leak via early-exit memcmp + secret branch. Flatline is a single-header toolbox for constant-time C (CT compare/select/lookup/div) guided by B.I.D.—no Branch on secrets, no secret Index, no variable-latency ops. DUDECT tests; feedback on LTO/autovec welcome
[ Parent
| on HN ]
There are no comments on this comment yet.