Le Sun, 13 Jun 2010 23:35:12 +0200,
Bernd Walter <[email protected]> a écrit :

> Go back to the originating mail.
> Crypto code wasn't aware of this problem and this is a way more
> obviuous optimization than function exchange.
> And I do believe that the programmers were clever people.
> Alarming, isn't it?

The removal of dead store by gcc is recent.

There was a discussion about this problem on the linux crypto mailing
list, see:
http://www.mail-archive.com/[email protected]/msg04229.html

If i remember well, they have introduced a secure_memset() function or
something like that, but I do not find this piece of code any more.

Regards.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "[email protected]"

Reply via email to