[Cryptography] [FORGED] Re: How programming language design can help us write secure crypto code

[Bill Frantz]

On 10/31/15 at 8:57 PM, leichter at lrw.com (Jerry Leichter) wrote:

>It appears the the gcc developers continue to operate in the 
>world of the 1970's.  Nice little utopia - unfortunately, 
>hardly anyone actually lives there.

As a programmer from the 1970s, I never expect  the compiler to 
remove my paranoid tests as modern gcc seems to do. Of course, 
in the 1970s, most of my code was in assembler, where removal 
behind my back is much much less likely.

I have always thought of C as a machine independent assembler. 
Having it remove code I have written completely blows that idea. 
And removing code is a poor way to trust the programmer.

Cheers - Bill

---------------------------------------------------------------------------
Bill Frantz        |"We used to quip that "password" is the most common
408-356-8506       | password. Now it's 'password1.' Who said 
users haven't
www.pwpconsult.com | learned anything about security?" -- Bruce Schneier