6 Jan
2014
6 Jan
'14
7:37 p.m.
Joachim Strömbergson joachim@secworks.se writes:
Related to Valgrind - Adam Langley has created ctgrind - a way to use Valgrind to test for timing based side channels:
Cool. After a quick read of the README, it sounds likt one doesn't even need a new tool. Just let the test programs use VALGRIND_MAKE_MEM_UNDEFINED to mark the areas with secret data, which memory accesses and branches ought to not depend on.
Regards, /Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.