3 ms·

Yep thats what i had in mind

• ok123456 10mo ago
  This proposal is worse because all the valuable regions of code will be clearly annotated for static analysis, either explicitly via a library/function call, or heuristically using the same boilerplate or fences.
  • voodooEntity 10mo ago
    Makes sense basically creating an easy to point out pattern for static analysis to find everything security related. As another response pointed out, its also possible that said secret data is still in the register, which no matter what we do to the curr value could exist. Thanks for pointing it out!
    • ok123456 10mo ago
      > Makes sense basically creating an easy to point out pattern for static analysis to find everything security related. This is essentially already the case whenever you use encryption, because there are tell-tale signs you can detect (e.g., RSA S-Box). But this will make it even easier and also tip you off to critical sections that are sensitive yet don't involve encryption (e.g., secure strings).