-
|
Hello! I apologize in advance if this is a silly question (this is Day 1 of my experience with Rust so the odds are pretty good that it is). I'm using RustCrypto, which depends on subtle, and my question is whether there's an easy/clean to way to turn subtle "off" temporarily? I'm trying to determine how much of a performance impact the constant time operations have on RustCrypto, and to avoid errors I want to modify RustCrypto as little as possible: ideally just toggling subtle on an off and then compare performance metrics. I understand that subtle will still introduce some performance characteristics even if I can manage to "disable" it, but an error that small is fine. Thanks in advance! |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
As a cryptographic rule of thumb, it's worrisome to have "off switches" for any security-critical features, because we're worried threat actors might find a way to flip them off in unintended contexts. If there are performance problems with the current implementation, it would be good to solve them. |
Beta Was this translation helpful? Give feedback.
-
|
That's fair - thanks for your quick response! |
Beta Was this translation helpful? Give feedback.
As a cryptographic rule of thumb, it's worrisome to have "off switches" for any security-critical features, because we're worried threat actors might find a way to flip them off in unintended contexts.
If there are performance problems with the current implementation, it would be good to solve them.