[Cryptography] How programming language design can help us write secure crypto code

Nemo nemo at self-evident.org
Mon Nov 2 12:47:02 EST 2015


Watson Ladd writes:

> So what's being called for is an introduction of 2's complement
> semantics for signed integer overflow into C. Alternatively you could
> pick a language that provides those semantics, or write a C compiler
> that provides these semantics.

Or pass the "-fwrapv" flag to GCC or Clang
(http://stackoverflow.com/a/3679149).

Your overall point is correct, of course. People should either actually
learn C -- it was standardized in 1989, for crying out loud -- or they
should stick to child-friendly languages.

Whines about compiler authors who implement the spec reveals much about
the whiner and nothing about the compiler authors.

 - Nemo
   https://self-evident.org/


More information about the cryptography mailing list