Skip to content

Comment on The Heartbleed Bugparent

Comments

This is especially true in the field of crypto, where timing attacks are a major issue. Knowing that your program will produce the correct result isn't enough, you need to know that the amount of time taken to compute that result doesn't leak information, and I don't think Haskell provides any way to ensure this.

Haskell in fact does the opposite. Changes in compiler version can drastically alter the performance of your code, even changing its O() class.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.