Hacker News new | ask | show | jobs
by fanf2 2007 days ago
Also (as mentioned in n1969) Microsoft’s “safe” functions do not conform to Annex K.
1 comments

See the safeclib docs and tests. I'm the maintainer. Only a couple do not conform.

Their SecureMemset variant is insecure. Most crypto memset_s implementations are unsafe, but they don't want to flush their cache, so attackers can look at the cache for the secrets.