4 ms·
> but not from cache side-channel attacks, which the _s variant would do Wow, was that a requirement for memset_s? I'd never heard of timing being a something
by dataflow 4y ago
> but not from cache side-channel attacks, which the _s variant would do
Wow, was that a requirement for memset_s? I'd never heard of timing being a something guaranteed by the *_s functions, regardless of security being in their name.
- rurban 4y agoWhen the ISO standard Annex K was written, they didn't know of those security problems yet. No one knew. But it is documented to be the secure variant, so known vulns need to be fixed there. It can be slow, it just needs to be secure.