Hi!
> Does zend_parse_parameters() figure out the string lengths in constant
> time? I hope so.
Yes, strings in PHP are stored with length, so getting string length is
a constant-time operation.
> This is fixed-length, so the issue of hiding a length does not arise,
I'm not sure the issue of hiding length is a real one here. Most crypto
algorithms would have fixed-length or one-of-the-very-short-list length
results, and in this scenario it is usually obvious from the app code
what the hash length would be, at least within very small number of
options, so I'm not sure how big a deal it is.
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227