3 ms·
> Signed overflow is IMHO not a problem anymore because of sanitizers IIRC the overflow in SHA3's reference implementation was hard to catch also for ststic an
by GTP 2y ago
> Signed overflow is IMHO not a problem anymore because of sanitizers
IIRC the overflow in SHA3's reference implementation was hard to catch also for ststic analisys tools, and had the practical impact of making it easy to generate collisions.
- uecker 2y agoA sanitizer could have transformed this into a run-time trap.