using constant time memcmp by C.Meessen

2025-12-17 03:50:57 +01:00 · 2015-08-27 11:19:24 +02:00
parent 1b7681ee83
commit bbdda67a6e
9 changed files with 63 additions and 11 deletions
--- a/4
+++ b/4
@@ -18,6 +18,10 @@ NEXT
 	so, pcp aims to be secure by default and fails
 	safely.

+	Using cst_time_memcpy by Christophe Meessen instead
+	of libc's memcpy: constant time memcpy is much more
+	secure than the default, especially in our context.
+
 0.3.0
 	Changed publuc key signature storage, previously
 	I didn't add the actual signature, therefore a