4 ms·
Are there any languages that properly support this, i.e. where you can express at the language level that the compiler should refrain from being to clever? If n
by danbruc 3y ago
Are there any languages that properly support this, i.e. where you can express at the language level that the compiler should refrain from being to clever? If not at the language level, are there compilers which you can ask to keep an eye on the timing?
- jedisct1 3y agoAssembly. Jasmin.
- ynik 3y agoEven assembly doesn't work anymore, as CPU manufacturers no longer guarantee constant-time execution unless the software opts-in to constant-time mode: https://lore.kernel.org/lkml/YwgCrqutxmX0W72r@gmail.com/ https://lore.kernel.org/lkml/YwgCrqutxmX0W72r@gmail.com/
- jedisct1 3y agoStill the best we can do.
- animaomnium 3y agoThere are a few research languages where handling secrets and constant-time operations correctly is a first-class feature. See for example: https://github.com/google/rune https://github.com/google/rune