the.bay.news

Sixteen XORs and not a single if

DEV Community
Sixteen XORs and not a single if
Verbose is a small proof-carrying language whose compiler is written in itself. Its TLS 1.3 design doc claimed 'no cryptography in the host' — and its own section 7 proved that false: six computations still lived in Python. They are now six Verbose rules with zero compiler changes, including a constant-time tag comparison where sixteen XORs fold into each other and never branch. Why a plain if would leak the secret, and the oracle that settles it: a real handshake against openssl.

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.