Bertrand,

Am 22.01.21 um 00:58 schrieb Tim Düsterhus:
> Am 22.01.21 um 00:45 schrieb Bertrand Jacquin:
>>> The strcmp converter is not binary safe. It uses strncmp internally.
>>
>> It is not indeed, what do you think of improving current related strcmp
>> documentation and example to add an hex conversion to achieve the same
>> goal? This would be pretty slow, I'd be happy if you have something more
>> efficient to offer for this use case. Also, CRYPTO_memcmp() is
> 
> Do you have a specific use-case in mind? Where would you / one need to
> compare binary data outside something like hash comparisons?
> 
> I'd say that users can figure out how to combine strcmp with the hex
> converter themselves. If performance is desired it might make sense to
> add a memcmp() converter that nicely complements strcmp and
> secure_memcmp. It's just that I did not yet have a need for this (and
> apparently no one else did).
> 

I just searched my emails for the old threads that added these converters:

strcmp       :
https://www.mail-archive.com/[email protected]/msg29799.html
secure_memcmp:
https://www.mail-archive.com/[email protected]/msg37552.html

The secure_memcmp discussion is particularly interesting here, because
Willy and me shortly discussed memcmp as well.

Best regards
Tim Düsterhus

Reply via email to