@david_chisnall @froge it was my first go-to till I hit a bug and then I just switched to openssl.
If I was going for prod grade I would use openssl right away
Tho there are things like rustls
@david_chisnall @froge it was my first go-to till I hit a bug and then I just switched to openssl.
If I was going for prod grade I would use openssl right away
Tho there are things like rustls
I haven’t looked at rustls for a while, but my understanding was that they wrote the protocol parsing and state machines in Rust (which is a huge win for security) and delegated the crypto to something else, which would normally include all of the sensible countermeasures for side channels.
@david_chisnall @froge that might be yea