-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Aloha!
Related to Valgrind - Adam Langley has created ctgrind - a way to use Valgrind to test for timing based side channels:
https://github.com/agl/ctgrind
Dunno if you have tested it on Nettle Niels or if it is even applicable. Just wanted to mention it.
- -- Med vänlig hälsning, Yours
Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim@secworks.se ========================================================================
Joachim Strömbergson joachim@secworks.se writes:
Related to Valgrind - Adam Langley has created ctgrind - a way to use Valgrind to test for timing based side channels:
Cool. After a quick read of the README, it sounds likt one doesn't even need a new tool. Just let the test programs use VALGRIND_MAKE_MEM_UNDEFINED to mark the areas with secret data, which memory accesses and branches ought to not depend on.
Regards, /Niels
nettle-bugs@lists.lysator.liu.se