1 Aug
2014
1 Aug
'14
6:02 a.m.
On Fri, Aug 01, 2014 at 10:08:08AM +0200, Wojtek Narczyński wrote:
Countermeasures here, countermeasures there, and the best language to do it is C. I find it hard to believe.
Well; it's a two-edged sword. C is close to the metal, so you have a lot of control over timing, memory allocations, even CPU registers; this is beneficial when dealing with things like timing attacks, and it is a disaster when trying to write provably correct code. I believe that having both in the same language would be the holy grail of secure programming.