3 ms·
Last I knew they didn't have much in the way of defence against timing side-channels, which pretty much rules it out for any real deployment.
by gsnedders 12y ago
Last I knew they didn't have much in the way of defence against timing side-channels, which pretty much rules it out for any real deployment.
- lmm 12y agoDon't they? I'd think someone would crack the bitcoin piñata if so.
- sp332 12y agoBitcoin piñata http://ownme.ipredator.se/ http://ownme.ipredator.se/ https://news.ycombinator.com/item?id=9027743 https://news.ycombinator.com/item?id=9027743
- dezgeg 12y agoNot everything in a SSL implementation needs constant-time operations. For example, something like ASN.1 parsing (which is a huge PITA do in C and has led to vulnerabilities in the past) could very well be done in OCaml.