On Čt, 2014-07-03 at 23:47 +0200, Matt Caswell via RT wrote:
> I've put together a fix (see below), but not pushed it because I was working
> on
> the assumption that if you had PURIFY defined then you wouldn't care about
> constant time operation. I've since been told that possibly some distros
> define
> PURIFY in their production builds. Anyone know of an example where this is
> used
> in a production build?
We use -DPURIFY in regular openssl packages in Red Hat Enterprise Linux
and Fedora.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
(You'll never know whether the road is wrong though.)
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
