Re: [PATCH] Add git-imap-send.
- From
Johannes Schindelin <johannes.schindelin@gmx.de>
- Date
- Mar 9, 2006, 13:47 UTC
- Message-ID
- <Pine.LNX.4.63.0603091445280.21440@wbgn013.biozentrum.uni-wuerzburg.de>
- In-Reply-To
- <slrne10b8c.fr9.mdw@metalzone.distorted.org.uk>
Hi,
On Thu, 9 Mar 2006, Mark Wooding wrote:
> There are reasons for which it'd be desirable that memcmp really compare > all the bytes, even if it can in theory stop early: in particular, there > are cases where early exit can leak timing information which makes it > possible to attack cryptographic protocols.
I would be astonished if memcmp has to be timing proof for *all* applications, just to keep crypto people happy. I don't *want* a slow-down in my super-duper 3d shooter.
> I'd have to recommend strncmp for this job.
Fully agree.
Ciao, Dscho