Re: Fwd: little request :)

From: Date: Wed, 05 Feb 2014 23:00:10 +0000
Subject: Re: Fwd: little request :)
References: 1 2 3  Groups: php.internals 
Request: Send a blank email to internals+get-72305@lists.php.net to get a copy of this message
Hi! > Does zend_parse_parameters() figure out the string lengths in constant > time? I hope so. Yes, strings in PHP are stored with length, so getting string length is a constant-time operation. > This is fixed-length, so the issue of hiding a length does not arise, I'm not sure the issue of hiding length is a real one here. Most crypto algorithms would have fixed-length or one-of-the-very-short-list length results, and in this scenario it is usually obvious from the app code what the hash length would be, at least within very small number of options, so I'm not sure how big a deal it is. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227

« previous php.internals (#72305) next »