28 Apr
2014
28 Apr
'14
7:47 a.m.
Nikos Mavrogiannopoulos n.mavrogiannopoulos@gmail.com writes:
Why not nettle memcmp?
I think "memcmp" should be avoided in the name, because (1) the memcmp return value distinguishes between > and <, while the side-channel silent comparison function should check only for equality, and (2) even if the link symbol should be nettle_something, it would be nice if the corresponding header file providea a name without any nettle prefix, and then it's not good to collide with the standard memcmp.
It would be good to export those functions as there are not typically available and each program re-invents them
Definitely.
Regards, /Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.