Zeroing buffers is insufficient
It's becoming gradually more tempting to write a crypto library in assembly language, because at least then, it says exactly what it's doing.Alas, microcode, and unreadability, and the difficulty of going from a provably correct kind of implementation all the way down to bare metal by hand.The proposed compiler extension, however, makes sense to me. Let's get it added to LLVM & GCC?