lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


> That's why it's added to c, which is a high-resolution timer of the
> process's uptime.
> 
> It's very likely that an app that does a sort after startup will have
> fairly predictable c values, but it would require some pretty good
> engineering on an attacker's part to be able to control both t AND c.
> Not impossible, but nontrivial, and that's probably enough.

Moreover, the quality of each pivot choice affets 'c' for all subsequent
partitions. Quite good engineering indeed.

Even if all goes wrong after many trials, all you risk is one slow sort
once in a while.

-- Roberto