Why can memcmp not be used to compare security critical data? – security.stackexchange.com

Why can memcmp not be used to compare security critical data? – security.stackexchange.com

13:55 No Comments
From man 3 memcmp: Do not use memcmp() to compare security critical data, such as cryptographic secrets, because the required CPU time depends on the number of equal bytes. Instead, ...

from Hot Questions - Stack Exchange OnStackOverflow
via Blogspot

Share this

Unknown

0 Comment to "Why can memcmp not be used to compare security critical data? – security.stackexchange.com"

Post a Comment

Subscribe to: Post Comments (Atom)