Date: Thu, 30 Aug 2012 18:01:06 +0000 From: David Holland <dholland-sourcechan...@netbsd.org>
On Thu, Aug 30, 2012 at 11:44:41AM -0400, Christos Zoulas wrote: > int > consttime_memcmp(const void *s1, const void *s2, size_t n) > [snip] so, I evidently missed this: what's "consttime" about this? It means that the time it takes does not vary depending on the data at s1 and s2. Here `constant' does not mean `bounded by a constant' but rather `not variable', i.e. `does not leak information about s1 and s2 through a timing side channel'.